Design/Logic Flaw

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service ConfigurationService on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the...

CVE-2016-6599

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service ConfigurationService on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service FileStorageService on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web...

CVE-2016-6599

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service ConfigurationService on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service FileStorageService on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web...

How your enterprise applications could be putting your company at risk

The typical company, large or small, depends on a number of different enterprise applications in order to ensure that employees can complete critical, daily tasks. Apps like those for enterprise resource planning, customer relationship management, screen and file sharing have become commonplace i...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 is affected by CVE-2016-6598. An unauthenticated .NET Remoting FileStorageService on port 9010 allows uploading a file to an arbitrary path on the Track-It! server, which can lead to code execution as NETWORK SERVICE or SYSTEM. Root cause: unauthenticated remote...

CVE-2016-6598

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service FileStorageService on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web...

CVE-2016-6599

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service ConfigurationService on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the...

CVE-2016-6599

CVE-2016-6599 affects BMC Track-It! 11.4 prior to Hotfix 3. An unauthenticated .NET remoting service exposed on port 9010 (ConfigurationService) can disclose a configuration file containing the app database name and credentials, including domain admin credentials, encrypted with a fixed DES key/I...

tecnologia.tiscali.it XSS vulnerability

Open Bug Bounty ID: OBB-549807 Description| Value ---|--- Affected Website:| tecnologia.tiscali.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

IT-Grundschutz, Kompendium

Zusammenfassung von Tests gemäß IT-Grundschutz Kompendium. Diese Routinen prüfen sämtliche Massnahmen des IT-Grundschutz Kompendiums des Bundesamts fuer Sicherheit in der Informationstechnik BSI auf den Zielsystemen soweit die Maßnahmen auf automatisierte Weise abgeprüft werden können...

BMC Track-It! 11.4 Code Execution / Information Disclosure

Happy new year! I was doing some new year cleaning and realised I never released this advisory properly. Two vulnerabilities in BMC Track-It! 11.4 which were disclosed by SecuriTeam Secure Disclosure on July 2016. Posting here because I've seen quite a few of these still in active use, live and...

ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure:...

Overview of rapid cyberattacks

Rapid cyberattacks like Petya and WannaCrypt have reset our expectations on the speed and scope of damage that a cyberattack can inflict. The Microsoft Enterprise Cybersecurity Group Detection and Response team worked extensively to help customers respond to and recover from these kinds of attack...

tuttosu.virgilio.it XSS vulnerability

Open Bug Bounty ID: OBB-539738 Description| Value ---|--- Affected Website:| tuttosu.virgilio.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Wordpress duena theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress duena theme - Arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

Wordpress endlesshorizon theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress endlesshorizon theme - Arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

Wordpress cafesalivation theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress cafesalivation theme - Arbitrary file downloadliberator author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...

Wordpress liberator theme - Arbitrary file download Vulnerability

Exploit for php platform in category web applications -===================­====================­=================- Exploit title : Wordpress liberator theme arbitrary file download author : MrSqar Yemeni hacker Team : IT-Geeks Tested on : BackBox linux check if site is vulnerabe :...