PT-2011-36: Insufficient authorization in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered an insufficient authorization in Citrix XenServer Virtual Switch Controller. Low privileged Read-Only users can change certain configuration parameters e.g. hostname and domain. Configuration snapshots that contain the entire system configuration including...

Proofpoint Protection Server contains multiple vulnerabilities

Overview Proofpoint Protection Server contains multiple vulnerabilities including authentication bypass, insufficient authorization checks, command injection, SQL injection, and directory traversal. Description Clear Skies Security's advisory states:"Enduser Authentication Bypass User-level acces...

Miniature Java Web Server <= 1.71 Multiple Vulnerabilities

Exploit for multiple platform in category remote exploits ========================================================== Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: = 1.71 Tested on: JRE build 1.6.017-b04 Path Traversal: A Path...

miniature java Web server 1.71 - Multiple Vulnerabilities

Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: \r\n\r\n Lead to: HTTP RE...

Brute Force and Insufficient Authorization vulnerabilities in WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Brute Force и Insufficient Authorization уязвимостях в WordPress. Ранее в 2008 году я уже писал о Brute Force уязвимости в WordPress http://websecurity.com.ua/2007/, что была выявлена Kad ещё в 2007 году http://securityvulns.ru/Pdocument580.html...

Vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Information Leakage, Cross-Site Request Forgery and SQL Injection vulnerabilities. Information Leakage: http://site/xampp/phpinfo.php During access to admin panel via Insufficient Authorization vulnerabilities it'...

Multiple vulnerabilities in FireStats

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Authorization, Information Leakage, Insufficient Anti-automation, Denial of Service и Cross-Site Scripting уязвимостях в FireStats плагине для WordPress и других CMS. Insufficient Authorization и Information Leakage:...

Multiple BeaWeblogic bugs

Weak JNDI trees protection, insufficient authorization for few weblogic.Admin methods, weak resource protection thorugh web.xml on case-insensitive filesystems, utilities passwords stored in cleartext, cleartext password leaked during reboot, technical information leak, logon with disabled...