43 matches found
PT-2024-12783 · Dell · Dell Esi
Name of the Vulnerable Software and Affected Versions: DELL ESI Enterprise Storage Integrator for SAP LAMA version 10.0 Description: The issue concerns an information disclosure vulnerability in the EHAC component of DELL ESI Enterprise Storage Integrator for SAP LAMA. A remote unauthenticated...
Email-Worm.Win32.Lama Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1c255ef6fd44877700867f94a59875d2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Lama Vulnerability: Insecure Permissions Description: The malware writes a ".BAT"...
lama Cross Site Scripting vulnerability OBB-1203415
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
lama-web.cz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1048084 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting lama-web.cz website and i...
1-Click iPhone and Android Exploits Target Tibetan Users via WhatsApp
A team of Canadian cybersecurity researchers has uncovered a sophisticated and targeted mobile hacking campaign that is targeting high-profile members of various Tibetan groups with one-click exploits for iOS and Android devices. Dubbed Poison Carp by University of Toronto's Citizen Lab, the...
UliCMS 2019.1 Spitting Lama - Persistent Cross-Site Scripting
UliCMS 2019.1 Spitting Lama - Persistent Cross-Site Scripting Exploit Title: UliCMS 2019.1 "Spitting Lama" - Stored Cross-Site Scripting Google Dork: intext:"by UliCMS" Date: 2019-05-12 Exploit Author: Unk9vvN Vendor Homepage: https://en.ulicms.de Software Link:...
UliCMS 2019.1 Spitting Lama - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: UliCMS 2019.1 "Spitting Lama" - Stored Cross-Site Scripting Google Dork: intext:"by UliCMS" Exploit Author: Unk9vvN Vendor Homepage: https://en.ulicms.de Software Link:...
UliCMS 2019.1 'Spitting Lama' - Persistent Cross-Site Scripting
Exploit Title: UliCMS 2019.1 "Spitting Lama" - Stored Cross-Site Scripting Google Dork: intext:"by UliCMS" Date: 2019-05-12 Exploit Author: Unk9vvN Vendor Homepage: https://en.ulicms.de Software Link: https://www.ulicms.de/aktuelles.html?single=ulicms-20191-spitting-lama-ist-fertig Version: 2019....
Spy Campaign Spams Pro-Tibet Group With ExileRAT
A cyber-espionage campaign has been spotted targeting recipients of a mailing list run by the Central Tibetan Administration CTA. India’s CTA is an organization officially representing the Tibetan government-in-exile. The territory of Tibet is administered by the People’s Republic of China – but...
lama-creation.de XSS vulnerability
Vulnerable URL: https://www.lama-creation.de/bestellung/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8862517 VIP website status:| No Check lama-creation.de SSL connection:| Grad...
Watering-Hole Attack Compromises Key Tibetan Site
In what has become a familiar scenario over the last couple of years, attackers have compromised a key Tibetan web site and loaded it with code that redirects some users to a third-party site that installs an APT-style backdoor. The attack has hit the Web site of the Central Tibetan Administratio...
New Mac Malware 'Dockster' Found on Dalai Lama site
A new trojan horse app called Dockster is targeting Mac users by exploiting a known Java vulnerability CVE-2012-0507. The trojan is apparently being delivered through a website gyalwarinpoche.com dedicated to the Dalai Lama and once installed can collect user keystrokes and other personal...
New Mac Malware 'Dockster' Found on Dalai Lama site
A new trojan horse app called Dockster is targeting Mac users by exploiting a known Java vulnerability CVE-2012-0507. The trojan is apparently being delivered through a website gyalwarinpoche.com dedicated to the Dalai Lama and once installed can collect user keystrokes and other personal...
Dockster Mac Malware Targets Dalai Lama Website Through Flashback Vulnerability
Mac malware targeting Tibetan supporters is being served on a website connected to the Dalai Lama. The Dockster Trojan, discovered by researchers at F-Secure, exploits the same Java vulnerability as the virulent Flashback Trojan that hit more than 600,000 OS X users earlier this year. F-Secure...
Dalai Lama's Birthday Used As Bait In Targeted Attacks
Followers and supporters of Tibetan Buddhist leader the Dalai Lama were the targets of an e-mail borne attack that used news of the spiritual leader’s birthday to trick recipients into installing a surreptitious monitoring program on their computers. Researchers at Kaspersky Lab identified a numb...
CVE-2008-0423
Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MYCONFclassRoot parameter to 1 inc.steps.accesserror.php, 2 inc.steps.checklogin.php, or 3 inc.steps.initsystem.php in admin/functions/...
CVE-2008-0423
The CVE-2008-0423 entry describes multiple PHP remote file inclusion vulnerabilities in Lama Software. The affected components are the admin/functions/ directory files inc.steps.access_error.php, inc.steps.check_login.php, and inc.steps.init_system.php, where an attacker can supply a URL via MY_C...
CVE-2008-0423
Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MYCONFclassRoot parameter to 1 inc.steps.accesserror.php, 2 inc.steps.checklogin.php, or 3 inc.steps.initsystem.php in admin/functions/...
lama-rfi.txt
+----------------------------------------------------------------------------+ Lama Software kostenlos Remote file include Scripts : Lama Software kostenlos Discovered By : QTRinux Scripts site : http://www.lama-software.de/ Thanks To : Tryag.cc cold z3ro HackTeach.org AlQaTaRi Mr.sh4r3s POISON...
Lama Software (14.12.2007) Multiple Remote File Inclusion Vulnerabilities
No description provided by source. +----------------------------------------------------------------------------+ Lama Software kostenlos Remote file include Scripts : Lama Software kostenlos Discovered By : QTRinux Scripts site : http://www.lama-software.de/ Thanks To : Tryag.cc cold z3ro...