Xpient Cash Drawer Operation Vulnerability

Advisory ID Internal CORE-2013-0517 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:http://www.coresecurity.com/advisories/xpient-cash-drawer-operation-vulnerability Date published: 2013-06-05 Date of last update: 2013-06-05...

I Read It Somewhere (IRIS) citations management tool <= v1.3 (post auth) Remote Command Execution

A vulnerability exists in IRIS citations management tool which allows a low privileged attacker to execute arbitrary commands. Details can be found on my blog: https://infosecabsurdity.wordpress.com/2013/02/09/iris-citations-management-tool-post-auth-remote-command-execution/ PoC:...

IRIS Citations Management Tool Command Execution

A vulnerability exists in IRIS citations management tool which allows a low privileged attacker to execute arbitrary commands. Details can be found on my blog: https://infosecabsurdity.wordpress.com/2013/02/09/iris-citations-management-tool-post-auth-remote-command-execution/ PoC:...

IRIS Citations Management Tool - (Authenticated) Remote Command Execution

Here is a bug that I finally found time to write about :- https://infosecabsurdity.wordpress.com/2013/02/09/iris-citations-management-tool-post-auth-remote-command-execution/ The attached contains my mini framework, exploit and screenshot. Cheers! aeon I Read It Somewhere IRIS = v1.3 post auth...

IRIS Citations Management Tool - (Authenticated) Remote Command Execution

IRIS Citations Management Tool - Authenticated Remote Command Execution Here is a bug that I finally found time to write about :- https://infosecabsurdity.wordpress.com/2013/02/09/iris-citations-management-tool-post-auth-remote-command-execution/ The attached contains my mini framework, exploit a...

The Nose Knows

Researchers at Bath University have unveiled a system where noses, not fingerprints or irises, could be scanned and used for biometric authentication. Using a system called PhotoFace, first developed at the University of the West of England Bristol and Imperial College London, individuals had...

IRIS SQL Injection

Exploit Title: IRIS SQL Injection Vulnerability Google Dork: intext:"Powered by iris" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.iris.tn Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Fedora 13 : python-feedparser-5.0.1-1.fc13 (2011-4911)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

Fedora 15 : python-feedparser-5.0.1-1.fc15 (2011-4988)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

No description provided by source. !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

Exploit for unknown platform in category remote exploits =================================================== IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit =================================================== !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windo...

Let IRIS Sniffer can be in the Win2003 SP1 running on-vulnerability warning-the black bar safety net

IRIS Sniffer is a famous network security eeye company of a network for the diagnosis of the Sniffer program with the Sniffer Pro compared with the interface refreshing, easy-to-use features, especially its features of HTTP, FTP, MAIL Protocol the ability to decode powerful, and therefore the...

Iris network Sniffer used with skill-the loophole warning-the black bar safety net

| The following part of the translation from iris comes with the Help file 1. 【Iris】 A good performance of the Sniffer. Sniffer English is Sniff, which is mounted in a computer and listening devices, monitored by computer data. 2. 【Iris installation position】 As a Sniffer, it can only be captured...

CVE-2005-3225

Multiple interpretation error in unspecified versions of 1 eTrust-Iris and 2 eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as...

CVE-2005-3225

Multiple interpretation error in unspecified versions of 1 eTrust-Iris and 2 eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as...

CVE-2005-3225: Undefined Security Weakness

Multiple interpretation error in unspecified versions of 1 eTrust-Iris and 2 eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as...

CVE-2001-0184

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet...

CVE-2001-0184

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet...

CVE-2001-0184

CVE-2001-0184 concerns eEye Iris 1.01 beta, where a remote attacker can trigger a denial of service by sending a malformed packet that crashes Iris when viewed. Affected component is the Iris client; underlying cause is mishandling of a crafted packet leading to crash. Exploitation details are no...

CVE-2001-0184: Undefined Security Weakness

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet...