[Onapsis Security Advisory 2010-002] SAP J2EE Engine MDB Path Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-002: SAP J2EE Engine MDB Path Traversal This advisory can be downloaded from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

[Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2010-004: SAP J2EE Authentication Phishing Vector This advisory can be downloaded from http://www.onapsis.com/research.html. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

Open Source Classifieds 1.1.0 Alpha Cross Site Scripting / SQL Injection

/ / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/ ======================================================================================== Open Source Classifieds OSClassi SQLi/Xss Multi Vulnerabilities...

Open Source Classifieds v1.1.0 Alpha (OSClassi) Mult Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Open Source Classifieds v1.1.0 Alpha OSClassi Mult Vulnerabilities ==================================================================== / / / | | \ | |/ | ' \ / | / / / |...

Open Source Classifieds 1.1.0 Alpha (OSClassi) - SQL Injection Cross-Site Scripting Arbitrary Admin Change

Open Source Classifieds 1.1.0 Alpha OSClassi - SQL Injection Cross-Site Scripting Arbitrary Admin Change / / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/...

Open Source Classifieds 1.1.0 Alpha (OSClassi) - SQL Injection / Cross-Site Scripting / Arbitrary Admin Change

/ / / | | \ | |/ | ' \ / | / / / | ' / | \ \ | | | | | | | | | / / | | | \ \ /|/|| || ||,| /,|./|/ ======================================================================================== Open Source Classifieds OSClassi SQLi/Xss/Arbitrary Admin Change Multi Vulnerabilities...

Microsoft Internet Explorer 67 - Remote Code Execution (Remote User Add)

Microsoft Internet Explorer 67 - Remote Code Execution Remote User Add Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use...

Microsoft Internet Explorer 6 / 7 Add User Exploit

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

Internet Explorer Remote Code Execution - Remote User Add Exploit

Exploit for unknown platform in category remote exploits ================================================================= Internet Explorer Remote Code Execution - Remote User Add Exploit ================================================================= Exploit Title: Internet Explorer 6/7 Remot...

Microsoft Internet Explorer 6/7 - Remote Code Execution (Remote User Add)

Exploit Title: Internet Explorer 6/7 Remote Code Execution -Remote User Add Exploit Date: 15/02/2010 Author: Sioma Labs Software Link: N/A Version: IE 7 Tested on: Windows XP sp2 CVE : Code : !/usr/bin/perl use strict; use Socket; use IO::Socket; print "\n"; print "800008 8 \n"; print "8 e eeeee...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : ...

ULoki Community Forum 2.1 - 'usercp.php' Cross-Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

ULoki Community Forum v2.1 (usercp.php) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= ULoki Community Forum v2.1 usercp.php XSS Vulnerability ========================================================= Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site...

ULoki Community Forum 2.1 Cross Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

Uiga Business Portal Cross Site Scripting / SQL Injection

Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Server = Apache/2.2.3 SQLDB = MYSQL...

Uiga Business Portal - SQL Injection / Cross-Site Scripting

Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Server = Apache/2.2.3 SQLDB = MYSQL...

Uiga Business Portal - SQL Injection Cross-Site Scripting

Uiga Business Portal - SQL Injection Cross-Site Scripting Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linu...

Uiga Business Portal SQL/ XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== Uiga Business Portal SQL/ XSS Vulnerability =========================================== Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site :...

iDefense Security Advisory 01.12.10: Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability

iDefense Security Advisory 01.12.10 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 12, 2010 I. BACKGROUND Adobe Reader and Acrobat are Portable Document Format PDF reader and processors. For more information, please visit following pages: http://www.adobe.com/products/reader/...