McKesson Horizon Clinical Infrastructure (HCI) version 7.6/7.8/10.0/10.1 hardcoded passwords

McKesson Horizon Clinical Infrastructure, also known as McKesson HCI, utilizes hardcoded passwords for Oracle database access. HCI serves as the patient record datastore for the majority of McKesson applications. There are two components to an HCI implementation: the Infrastructure or Master serv...

Fedora 11 : drupal-6.13-1.fc11 (2009-7315)

Fixes SA-CORE-2009-007 http://drupal.org/node/507572 . Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Multiple vulnerabilities and weaknesses were discovered in Drupal...

Hackers break into database, demand ransom

From WaPo Security Fix Brian Krebs Hackers last week broke into a Virginia state Web site used by pharmacists to track prescription drug abuse. They deleted records on more than 8 million patients and replaced the site’s homepage with a ransom note demanding $10 million for the return of the...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...

Pro Chat Rooms 3.0.3 (guid) SQL Injection Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

FreeBSD Ports: konversation

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Gentoo Linux multiple packages incalid SSL certificates generation

Certificate may be leaked to public file due to invalid ssl-cert eclass implementation...

Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC

No description provided by source. !/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figure...

Multiple Symantec antiviral products Reporting Server code execution

It's possible to spoof executable report file. Password hash is leaked during failed logon attempt...

SHOUTcast <= 1.9.4 File Request Format String Exploit (Leaked)

Exploit for linux platform in category remote exploits ============================================================== SHOUTcast include include include include include include include include include include include define SHELLPORT 7000 define SHELLCOMMAND "unset HISTFILE; uname -a; id;" if 1...