Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow

====================================================================== Secunia Research 02/12/2009 - Lateral Arts uploader ActiveX Control Buffer Overflow - ====================================================================== Table of Contents Affected...

DotNetNuke ErrorPage.aspx Cross-Site Scripting Vulnerability

--- Lateral Security Advisory 20090430-001 --- Name: DotNetNuke ErrorPage.aspx Cross-Site Scripting Vulnerability Reported: 30th April 2009 Published: 22nd May 2009 Background: DotNetNuke is one of the most widely adopted open source framework for website content management and web application...

Oracle SQL injection lateral attacks

SQL injection into uncontrolled PL/SQL procedires is possible with e.g. modification of data format with ALTER SESSION...

NTLM Relay to Self (HTTP to LDAP) - Post Exploitation

This module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate via...