CVE-2010-4738

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to 1 multi/city.asp in the Multi Agent System and 2 resulttype.asp in the Single Agent System...

Century Marketing Inc SQL Injection

Exploit Title :Century Marketing Inc web development Firm Sql Injection Vulnerability Author : eXeSoul Contact : [email protected] Date : 16-02-2011 HomePage : www.indishell.in Version : all Tested on : windows/linux Vulnerability Style : PHP Sql Injection Vunerability Vendor:...

RealNetworks, Inc. Releases Security Updates for RealPlayer

RealNetworks, Inc. has released security updates to address a vulnerability affecting Windows RealPlayer 14.0.1 and earlier versions and RealPlayer Enterprise 2.1.4 and earlier versions. Exploitation of this vulnerability may allow an attacker to execute arbitrary code in the context of the...

RealNetworks, Inc. Releases Update for RealPlayer

RealNetworks, Inc. has released an update for Windows RealPlayer 14.0.1 and prior to address a vulnerability. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the RealNetworks, Inc. security advisory and appl...

SuSE 10 Security Update : XEmacs (ZYPP Patch Number 5303)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Citrix Provisioning Services Detection

The remote host is running Citrix Provisioning Services, a virtualization application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51663; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptxrefname:"IAVT",...

SuSE 11.1 Security Update : iSCSI (SAT Patch Number 2879)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

Accidental Leak Reveals Chinese Hackers Have IE Zero Day !

Evidence, leaked accidentally, points to Chinese based miscreants' knowledge, and potential exploitation, of the latest Microsoft Corporation NasdaqGS: MSFT Internet Explorer zero day, via a recently released Google Inc.'s NasdaqGS: GOOG researcher'sMichal Zalewski fuzzer application… Ooops. More...

ObjectivityDB - Lack of Authentication

ObjectivityDB - Lack of Authentication !/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object sto...

iDefense Security Advisory 01.10.11: HP Network Node Manager Command Injection Vulnerability

iDefense Security Advisory 01.10.11 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 10, 2011 I. BACKGROUND HP Network Node Manager Command Injection Vulnerability HP Network Node Manager NNM is an application suite that is used to map out and manage network topography. NNM runs on a...

Silicon Graphics Inc (SGI) - IRIX - Local Kernel Memory Disclosure/Denial of Service

===============================ADVISORY=============================== Advisory: Silicon Graphics Inc SGI - IRIX - Local Kernel Memory Disclosure/Denial of Service Advisory ID: DSEC-2010-0001 Author: Neil Kettle, Digit Security Ltd Affected Software: Silicon Graphics SGI IRIX Vendor URL:...

CoolPlayer 2.18 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...

Texas Man Indicted for Hacking Eden Prairie Business, Stealing $274,000

A federal indictment unsealed earlier today alleges that a 35-year-old Texas man hacked into the computer network of an Eden Prairie business, stealing approximately $274,000. The indictment, filed in Minneapolis on October 13, 2010, charges Jeremy Parker of Houston, Texas, with one count of...

RealNetworks Releases Security Update for RealPlayer

RealNetworks, Inc. has released an update for RealPlayer to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the RealNetworks notice released on December 10, 2010 and appl...

Genesco Inc. Confirms Payment Card Data Breach in U.S. Stores

Specialty retailer Genesco Inc. announced on Friday that it experienced a criminal intrusion into the part of its computer network that processes payment card transactions. Some card details might have been compromised. However, the company quickly secured the affected network segment and express...

iDefense Security Advisory 12.07.10: Apple QuickTime PICT Memory Corruption Vulnerability

iDefense Security Advisory 12.07.10 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 07, 2010 I. BACKGROUND QuickTime is Apple's media player product used to render video and other media. The PICT file format was developed by Apple Inc. in 1984. PICT files can contain both object-orient...

Novell Vibe 3 BETA OnPrem Stored Cross-site Scripting Vulnerability

Title: Novell Vibe 3 BETA OnPrem Stored Cross-site Scripting Vulnerability Risk CVSS2 Base Score: High 7.0 Solutionary ID: SERT-VDN-1002 CVE ID: CVE-2010-4322 Solutionary disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Novell-Vibe-Beta-3-XSS-vulnerability.html Product: Vibe...

Apple QuickTime for Windows文件系统权限本地信息泄露漏洞

BUGTRAQ ID: 45237 CVE ID: CVE-2010-0530 Apple QuickTime是一款非常流行的多媒体播放器。 Apple QuickTime在实现上存在漏洞，攻击者可利用此漏洞获取敏感信息，访问用户配置文件中"Apple Computer" 目录下的内容。 此漏洞源于文件系统权限问题。 Apple QuickTime Player 5.0.2 - 7.6.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

IceWarp Webmail Detection

The remote web server hosts IceWarp, a webmail application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51097; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"IceWarp Webmail Detection"; scriptsummaryenglish:"Checks for IceWarp Webmail";...

Rae Media INC Real Estate Single and Multi Agent System SQL Injection

Exploit for asp platform in category web applications ===================================================================== Rae Media INC Real Estate Single and Multi Agent System SQL Injection =====================================================================...