OSSIM v2.1.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== OSSIM v2.1.5 SQL Injection Vulnerability ======================================== Advisory Name: SQL injection in OSSIM Vulnerability Class: SQL injection Release Date: 12-16-2009 Affected...

OSSIM v2.1.5 SQL Injection Vulnerability

No description provided by source. Advisory Name: SQL injection in OSSIM Vulnerability Class: SQL injection Release Date: 12-16-2009 Affected Applications: Confirmed in OSSIM 2.1.5. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9...

OSSIM 2.1.5 - Remote Command Execution

OSSIM 2.1.5 - Remote Command Execution Advisory Name: Remote Command Execution in OSSIM Vulnerability Class: Remote Command Execution Release Date: 12-16-2009 Affected Applications: Confirmed in OSSIM 2.1.5. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote...

OSSIM 2.1.5 - SQL Injection

OSSIM 2.1.5 - SQL Injection Advisory Name: SQL injection in OSSIM Vulnerability Class: SQL injection Release Date: 12-16-2009 Affected Applications: Confirmed in OSSIM 2.1.5. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Car car, TYPO3 Watchdog abawatchdog, File list drblob, ListMan nllistman, XDS Staff List xdsstaff, Document Directorys danpdocumentdirs, Random Prayer Version 2 steprayer2, Diocese of Portsmouth Resources...

Invision Power Board Local File Inclusion / SQL Injection

============================================= - Release date: December 4th, 2009 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL...

Huawei MT882 Modem/Router Multiple Vulnerabilities

0 Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

Huawei MT882 ModemRouter - Multiple Vulnerabilities

Huawei MT882 ModemRouter - Multiple Vulnerabilities Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip...

Huawei MT882 Modem/Router - Multiple Vulnerabilities

Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

ToutVirtual VirtualIQ Pro 3.2 Multiple Vulnerabilities

Exploit for jsp platform in category web applications ====================================================== ToutVirtual VirtualIQ Pro 3.2 Multiple Vulnerabilities ====================================================== Vuln name: ToutVirtual VirtualIQ Pro Multiple Vulnerabilities Systems affected...

SafeNet SoftRemote Local Buffer Overflow - Security Advisory - SOS-09-008

SafeNet SoftRemote Local Buffer Overflow - Security Advisory - SOS-09-008 Release Date. 30-Oct-2009 Vendor Notification Date. 20-Jul-2009 Product. SafeNet SoftRemote Platform. Microsoft Windows Affected versions. 10.8.5 Build 2, 10.3.5 Build 6 verified and possibly others. Other vendors which hav...

Pentaho 1.7.0.1062 - Cross-Site Scripting / Information Disclosure

Pentaho 1.7.0.1062 Multiple Vulnerabilities Name Multiple Vulnerabilities in Pentaho Systems Affected Pentaho '...

[AntiSnatchOr] Pentaho Bi-server multiple vulnerabilities

Pentaho 1.7.0.1062 Multiple Vulnerabilities Name Multiple Vulnerabilities in Pentaho Systems Affected Pentaho = 1.7.0.1062 Severity High Impact CVSSv2 High 7/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://www.pentaho.com Advisory...

Subrion CMS Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-16 Positive Technologies Security Advisory Subrion CMS Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software Subrion CMS Versions prior to 1.1.x Product...

Cetera CMS SQL Injection vulnerability

---------------------------------------------------------------------- PT-2009-18 Positive Technologies Security Advisory Cetera CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software Cetera CMS Versions up to 14 inclusive...

AKmedia CMS SQL Injection vulnerability

---------------------------------------------------------------------- PT-2009-34 Positive Technologies Security Advisory AKmedia CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software AKmedia CMS Versions up to 2.dm Product...

Tribiq CMS Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-29 Positive Technologies Security Advisory Tribiq CMS Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software Tribiq CMS Versions prior to 5.1.1 Product Lin...

'High Risk' Flaw Fixed in Google Chrome

Google has pushed out a new version of its Chrome browser to fix a high-severity security hole that could lead to malicious code execution attacks. The vulnerability could be exploited to run arbitrary code within the Google Chrome sandbox, the company said in an advisory. The raw details: The v8...

Stable Channel Update

3.0.195.24 has been promoted to the stable channel. There are no additional fixes or changes in this release. Security Fixes: CVE-2009-0689 dtoa error parsing long floating point numbers The v8 engine uses a common dtoa implementation to parse strings into floating point numbers. We have applied ...

BIND Dynamic Update DoS

BIND Dynamic Update DoS CVE: CVE-2009-0696 CERT: VU725188 Posting date: 2009-07-28 Program Impacted: BIND Versions affected: BIND 9 all versions Severity: High Exploitable: remotely Summary: BIND denial of service server crash caused by receipt of a specific remote dynamic update message...