citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

[Bkis-10-2009] Photo DVD Maker Professional Buffer Overflow Vulnerability

Title : Photo DVD Maker Professional Buffer Overflow Vulnerability 1. General Information Photo DVD Maker Professional is a tool allows you to create entertaining photo slideshows with many file formats supported. Bkis has just detected a vulnerability in the software related to the processing of...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "FrontEnd MP3 Player" femp3player, "Search In Tables" fesearchintable, "Content Search" gstcontentsearch, "Multilingual Alias" multilingualalias, "Myth Repository" mythrepository and "References database"...

TYPO3 Security Bulletin

It has been discovered that the extension CWT Community cwtcommunity is vulnerable to SQL-injections. Release Date: June 16 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.0.3 and all versions below...

Stable Update: Bug fix

Edit 13 May 2009: Disclosing that this release contains the fix for CVE-2009-0945, an issue in WebKit code that also affects Apple's Safari web browser. We did not want to disclose this until Apple's fix for Safari users was released. Google Chrome's Stable channel has been updated to version...

Stable Update: Security Fix

Google Chrome's Stable channel has been updated to version 1.0.154.64 to fix two security issues discovered by internal Google testing. This release also contains A new notification at startup that makes it easier to set Google Chrome as the default browser. If you don't want Google Chrome to be...

[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow

GOM Encoder Heap-based Buffer Overflow 1. General Information GOM Encoder is a video transcoder that can work with a lot of video formats. One of its functions is embedding subtitles to the video, which means you can see subtitles on the resulting video even if your device doesn't support subtitl...

Multiple vulnerabilities in TYPO3 third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "Accessibility Glossary" a21glossary, "Calendar Base" cal, "Flat Manager" flatmgr Release Date: March 05, 2009 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with...

Zabbix 1.6.2 Frontend Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================== Zabbix 1.6.2 Frontend Multiple Vulnerabilities ============================================== Zabbix 1.6.2 Frontend Multiple Vulnerabilities Name Multiple Vulnerabilities in Zabbix Frontend...

DZcms 3.1 SQL Injection

Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

DZcms v.3.1 (products.php pcat) Remote SQL Injection Vulnerability

No description provided by source. Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

DZcms 3.1 - SQL Injection

DZcms 3.1 - SQL Injection Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability

Title: CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability CA Advisory Reference: CA20090107-01 CA Advisory Date: 2009-01-07 Reported By: Michel Arboi of Tenable Network Security Impact: A remote attacker can execute arbitra...

DZcms 3.1 - SQL Injection

Application: DZcms v.3.1 Vendor Name: CyDezines Vendor Url: http://www.cydezines.com Bug Type: dzCMS SQL Injection Vulnerability Exploitation: Remote Severity: High Solution Status: Unpatched Google Dork: "Powered by DZcms" POC:...

HTMPL 1.11 Code Execution

Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few other little..... tricks The admins...

HTMPL 1.11 - Command Execution

HTMPL 1.11 - Command Execution Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few othe...

Collabtive 0.4.8 Multiple Vulnerabilities

Collabtive 0.4.8 Multiple Vulnerabilities Name Multiple Vulnerabilities in Collabtive Systems Affected Collabtive 0.4.8 and possibly earlier versions Severity High Impact CVSSv2 High 8/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://collabtive.o-dyn.de/ Advisory...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...

DFLabs PTK 1.0 - Local Command Execution

DFLabs PTK 1.0 - Local Command Execution ==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com...

DFLabs PTK 1.0 - Local Command Execution

==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affected Software DFLabs PT...