A10 Networks ACOS 2.7.0-P2 Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === Details === Advisory: http://www.quantumleap.it/a10-networks-remote-buffer-overflow-softax/ Affected Product: ACOS Version: 2.7.0-P2build: 53 older versions may be affected too Tested on SoftAX2 === Executive Summary === Using a specially crafted...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 6547 / 6548 / 6550)

The SUSE Linux Enterprise 11 SP1 kernel have been updated to fix various bugs and security issues. The following security issues have been fixed : - Several buffer overread and overwrite errors in the UDF logical volume descriptor code were fixed that might have allowed local attackers able to...

The Dawn of OSX Worms – Renepo/Leap-A

2004 and 2006 A few years after the release of OS X, 2004 brought a new shell script worm called Renepo. The worm’s main goal was to disable Mac OS X’s firewall and security settings. It also installed tools for password-sniffing and made key system directories world-writeable, undetected. The wo...

Experts Call for Change in Thinking on Federal Cybersecurity

The powers that be in Washington are not known for getting things done quickly, and the current power vacuum in information security in the capital is a painful case in point. The well-documented failure to find a coordinator to oversee security for the country is only one piece of the puzzle, an...

Unrestricted file upload

Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files aka Manage Files request to the default URI, then accessing the file via a direct request...

Sql injection

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchterm or 2 email parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter aka the message in an article comment or 2 the searchterm parameter aka the search post form. NOTE: some of these details are obtained from thi...

CVE-2009-1613

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchterm or 2 email parameter...

CVE-2009-1614

Multiple cross-site scripting XSS vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter aka the message in an article comment or 2 the searchterm parameter aka the search post form. NOTE: some of these details are obtained from thi...

CVE-2009-1615

Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files aka Manage Files request to the default URI, then accessing the file via a direct request...

CVE-2009-1614

CVE-2009-1614 refers to multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4, allowing remote attackers to inject arbitrary web script or HTML via the msg parameter (article comment message) or the searchterm parameter (search form). The vulnerability details come from multiple s...

CVE-2009-1615

CVE-2009-1615 affects Leap CMS 0.1.4. It is an unrestricted file upload vulnerability allowing remote attackers to execute arbitrary code by uploading a file with an executable extension through admin.system.files (Manage Files) to the default URI, then accessing it directly. CVSSv2 base score ~6...

CVE-2009-1615

Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files aka Manage Files request to the default URI, then accessing the file via a direct request...

CVE-2009-1613

Leap CMS 0.1.4 is affected by SQL injection in leap.php via the (1) searchterm and (2) email parameters when magic_quotes_gpc is disabled. The core issue is improper input handling in Leap CMS, enabling remote attackers to execute arbitrary SQL. Impact is partial confidentiality, integrity, and a...

CVE-2009-1613

Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchterm or 2 email parameter...

CVE-2009-1614

Multiple cross-site scripting XSS vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter aka the message in an article comment or 2 the searchterm parameter aka the search post form. NOTE: some of these details are obtained from thi...

BLIND SQL INJECTION--Leap CMS 0.1.4-->

!/usr/bin/perl ----------------------------------------------- BLIND SQL INJECTION--Leap CMS 0.1.4-- ----------------------------------------------- CMS INFORMATION: --WEB: http://leap.gowondesigns.com/ --DEMO: http://php.opensourcecms.com/scripts/details.php?scriptid=161&name=Leap --CATEGORY: CM...

Leap CMS 0.1.4 XSS / SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://leap.gowondesigns.com/ | |--DOWNLOAD: http://leap.gowondesigns.com/download.php?leap014.zip | |--DEMO: http://php...

Leap CMS 0.1.4 (SQL/XSS/SU) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Leap CMS 0.1.4 SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://leap.gowondesigns.com/ | |--DOWNLOAD: http://leap.gowondesign...