[SECURITY] Fedora 18 Update: poppler-0.20.2-10.fc18

Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...

Smartphone Pentest Framework 0.1.3 / 0.1.4 Command Injection

Smartphone Pentest Framework SPF versions 0.1.3 and 0.1.4 suffer from an OS command injection vulnerability. Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: 0.1.3, 0.1.4 and probably prior Tested Versions: 0.1.3, 0.1.4 Vendor Notification: November 19, 201...

Smartphone Pentest Framework 0.1.3 / 0.1.4 Command Injection

Advisory ID: HTB23127 Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: 0.1.3, 0.1.4 and probably prior Tested Versions: 0.1.3, 0.1.4 Vendor Notification: November 19, 2012 Public Disclosure: December 10, 2012 Vulnerability Type: OS Command Injection CWE-78...

VeriCentre web application SQL injection vulnerability

Overview The VeriCentre web application contains a SQL injection vulnerability. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'The VeriCentre web application contains a SQL injection vulnerability within the TerminalId, ModelName, and...

3S CoDeSys Vulnerabilities

Overview This advisory is a follow-up to the alert update, ICS-ALERT-11-336-01A 3S CoDeSys Vulnerabilities, which was released on the ICS-CERT Web page on December 02, 2011. Security researcher Celil Unuver SignalSec LLC and independent researcher Luigi Auriemma have identified vulnerabilities in...

cgCraft LLC SQL Injection

---------------------------------------------------------------- cgCraft llc SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : cgCraft llc SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Li...

Subrion CMS 2.2.1 - Cross-Site Request Forgery (Add Admin)

Subrion CMS 2.2.1 - Cross-Site Request Forgery Add Admin !-- Title: Subrion CMS 2.2.1 CSRF Add Admin Exploit Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilize...

Subrion CMS 2.2.1 Cross Site Scripting

Exploit for php platform in category web applications Subrion CMS 2.2.1 Multiple Remote XSS POST Injection Vulnerabilities Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP...

Subrion CMS 2.2.1 CSRF Add Admin Exploit

Exploit for php platform in category web applications !-- Title: Subrion CMS 2.2.1 CSRF Add Admin Exploit Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilizes...

Subrion CMS 2.2.1 Cross Site Request Forgery

!-- Title: Subrion CMS 2.2.1 CSRF Add Admin Exploit Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database. Subrion CMS can be easily integrated in...

Subrion CMS 2.2.1 Cross Site Scripting

Subrion CMS 2.2.1 Multiple Remote XSS POST Injection Vulnerabilities Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database. Subrion CMS can be...

Subrion CMS 2.2.1 CSRF Add Admin Exploit

Summary Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database. Subrion CMS can be easily integrated into your current website or used as a stand alone platform. It's extremely flexible and scalable php system that stands for a content managemen...

Infrastructure Resources LLC - SQL Injection Vulnerability

Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0...

Acorn Internet Services - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Acorn Internet Services - SQL Injection Vulnerability ========================================================================== Title: Acorn Internet Services - SQL...

Bintech Systems LLC SQL Injection

Exploit for asp platform in category web applications Exploit Title: Bintech Systems LLC Admin Auth Bypass Exploit Google Dork: "Powered By: Bintech Systems LLC" Date: 11-03-2012 Author: BLACK BURN BBHH Tested on: Linux Exploit : http://localhost/ptah/login.asp user: 'or''=' pass: 'or''=' Demo :...

Bintech Systems LLC SQL Injection

Exploit Title: Bintech Systems LLC Admin Auth Bypass Exploit Google Dork: "Powered By: Bintech Systems LLC" Date: 11-03-2012 Author: BLACK BURN BBHH Tested on: Linux Exploit : http://localhost/ptah/login.asp user: 'or''=' pass: 'or''=' Demo :...

Multiple vulnerabilities in epesi BIM

Vulnerability ID: HTB23061 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinepesibim.html Product: epesi BIM Vendor: Telaxus LLC http://www.epesibim.com/ Vulnerable Version: 1.2.0-rev8154 and probably prior Tested Version: 1.2.0-rev8154 Vendor Notification: 30 November 2011...

epesi BIM 1.2.0-rev8154 Cross Site Scripting

Vulnerability ID: HTB23061 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinepesibim.html Product: epesi BIM Vendor: Telaxus LLC http://www.epesibim.com/ Vulnerable Version: 1.2.0-rev8154 and probably prior Tested Version: 1.2.0-rev8154 Vendor Notification: 30 November 2011...

FTC Settles Charges With Android App Developer Over 'Unfair' Default Settings

In a landmark move, the Federal Trade Commission has settled charges it brought against the maker of a P2P file-sharing application that the commission alleged included unfair default settings that caused users to unknowingly share photos, videos and other personal data. The settlement with...

TimeLive Detection (HTTP)

HTTP based detection of TimeLive. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902480";...