Introduction to Malware Analysis

In this video, Lenny Zeltser, a SANS instructor, outlines the basic concepts of reverse engineering malware, describing the process of analyzing the code and the behavior of the malware...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...

CVE-2010-0971

CVE-2010-0971 concerns multiple XSS flaws in ATutor 1.6.4. The affected components are the polls, groups, and assignments modules: injecting scripts via (1) Question and (2) Choice in tools/polls/add.php, (3) Type and (4) Title in tools/groups/create_manual.php, and (5) Title in assignments/add_a...

CVE-2008-7146: Exposure of Sensitive Information to an Unauthorized Actor

IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to 1 KnowledgeImpactCourse.htm, 2 LRN-formattedCourse.htm, or 3 CreateCourse.htm in help/1/Instructor/, which reveals the installation path in...

Cross site scripting

Cross-site scripting XSS vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter...

CVE-2006-1400

Cross-site scripting XSS vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter...

CVE-2006-1400

Cross-site scripting XSS vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter...

CVE-2006-1400

CVE-2006-1400 is a Cross-site scripting (XSS) vulnerability in Metisware Instructor (versions

CVE-2006-1400: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter...

Metisware Instructor XSS vuln.

Metisware Instructor XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.metisware.com/ affected versions:1.3 and prior orginal advisory: http://pridels.blogspot.com/2006/03/metisware-instructor-xss-vuln.html Vuln. description: Instructor contains a flaw that allows a remote...

[UNIX] OWLS Remote Arbitrary Files Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...