CVE-2010-4557

Buffer overflow in the lmtcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted request to port 9001...

Fedora Update for squid FEDORA-2010-14149

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14149 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2010-4354

The CVE covers a vulnerability in Cisco VPN products where remote attackers could enumerate valid VPN group names by sending an IKE Aggressive Mode packet with the group name in the ID field. Affected devices include ASA 5500 series, PIX 500 series, and VPN Concentrators 3000 series. Root cause i...

CVE-2010-2408 | Persistent Log Out Redirection Vulnerability in Oracle I-Recruitment OA.jsp

Advisory: Persistent Log Out Redirection Vulnerability in Oracle I-Recruitment OA.jsp CVE-2010-2408 Version Affected - 11.5.10.2, 12.0.6, 12.1.3 About: Oracle I-Recruitment Suite Oracle iRecruitment is a web based full-cycle recruiting solution that gives managers, recruiters and candidates the...

Oracle I-Recruitment Redirection

Advisory: Persistent Log Out Redirection Vulnerability in Oracle I-Recruitment OA.jsp CVE-2010-2408 Version Affected - 11.5.10.2, 12.0.6, 12.1.3 About: Oracle I-Recruitment Suite Oracle iRecruitment is a web based full-cycle recruiting solution that gives managers, recruiters and candidates the...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

NitroSecurity ESM 8.4.0a - Remote Code Execution

NitroSecurity ESM 8.4.0a - Remote Code Execution -- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it w...

RHEL 4 : kernel (RHSA-2010:0779)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0779 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues:...

Allpc 2.5 osCommerce - SQL Injection / Cross-Site Scripting

+Title Allpc 2.5 osCommerce SQL-i/XSS Multiple Vulnerabilities +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Version: 2.5 Vendor:...

Fedora Update for squid FEDORA-2010-14236

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14236 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Wonderware InBatch Vulnerability

Overview An independent security researcher has published information to a vulnerability disclosure website regarding a buffer overflow vulnerability in the Wonderware InBatch and I/A Series Batch software products all supported versions. According to the researcher’s report, the service listenin...

Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43249/info Multiple I-Escorts products are prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...

Multple I-Escorts Products - escorts_search.php Cross-Site Scripting

Multple I-Escorts Products - escortssearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43249/info Multiple I-Escorts products are prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

SQL injection vulnerability in i-Web Suite

Vulnerability ID: HTB22543 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010...

XSS vulnerability in i-Web Suite

Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerabilit...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

[SECURITY] Fedora 12 Update: kernel-2.6.32.16-150.fc12

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

XSS in i-Web Suite

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in i-Web Suite which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in i-Web Suite The vulnerability exists due to input sanitation error in th...

I-net Enquiry Management Script - SQL Injection

I-net Enquiry Management Script - SQL Injection Name : I-net Enquiry management Script SQL Injection Vulnerability Date : july 13, 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Author : D4rk357 D4rk357atyahoodotin special thanks to : b0nd, Fbih2s,rockey killer,The empty,...

I-net Enquiry management Script SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== I-net Enquiry management Script SQL Injection Vulnerability =========================================================== Name : I-net Enquiry management Script SQL Injection...