ZTE Score M Android Phone Found to Have Backdoor Installed

UPDATE–An Android handset produced by Chinese manufacturer ZTE has a backdoor installed that could enable an attacker to take control of an affected device remotely and run arbitrary code. The manufacturer has acknowledged the issue in the ZTE Score M, which includes a harcoded password, and says...

Design/Logic Flaw

Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XSCF Control Package XCP...

CVE-2012-1693

CVE-2012-1693 affects Oracle SPARC Enterprise M Series Servers XCP 1110, with the issue related to the XSCF Control Package (XCP) that can impact availability. The description in the connected records is generic and does not specify the exact root cause, vulnerable component version details, expl...

CVE-2012-0548

Technical details of CVE-2012-0548 are not publicly available in the provided documents; there is no information here about affected products, root cause, impact, or remediation. Monitor for updates.

TestLink SQL Injection Vulnerabilities

Exploit for php platform in category web applications ------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27...

TestLink 1.9.3 SQL Injection

------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27 January 2012 Vendor Patch: 4 February 2012 Public...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

Authentication flaw

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

CVE-2011-5078

CVE-2011-5078 affects Sybase M-Business Anywhere 6.7 before ESD#3 and 7.0 before ESD#7. The web administration interface does not require admin authentication for unspecified scripts, enabling remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable. M-SEARCH HTTP/1.1 Host:239.255.255.250:1900...

M-Player 0.4 - Local Denial of Service

M-Player 0.4 - Local Denial of Service !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file= "Crash.mp3"; my...

M-Player 0.4 Local Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file=...

M-Player 0.4 Denial Of Service

EDB-ID: 18337 CVE: N/A OSVDB-ID: N/A Author: JaMbA Published: 2012-01-08 Verified: Not Verified Exploit Code: Download Vulnerable App: Download Rating Overall: 1 2 3 4 5 0.0 Prev Home Next !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author:...

M-Player 0.4 - Local Denial of Service

!/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file= "Crash.mp3"; my $junk= "\x41" x 2048; open$FILE,"$file";...

帝国(EmpireCMS)cms 6.6 后台拿shell

简要描述： 以前6.5的有人发的方法是，（进入后台---系统设置---管理数据表---管理系统模型---导入新型模块,直接把修改过的php的shell改名为shell.php.mod上传，新版使用uploadmnum.php来递增数字） 详细说明： 以前6.5的有人发的方法是，（进入后台---系统设置---管理数据表---管理系统模型---导入新型模块,直接把修改过的php的shell改名为shell.php.mod上传，新版使用uploadmnum.php来递增数字）发现6.6不行，上传之后会变成类似uploadm1324885505nXmTdQamQq.php这样的！ 漏洞证明：...

Sybase M-Business Anywhere两个权限提升漏洞

Sybase 的M-Business Anywhere 可以提供一个移动内容和应用程序平台，将基于Web的移动内容和应用程序传送至移动设备。 Sybase M-Business Anywhere在实现上存在两个未明细节的漏洞，可被恶意用户利用获取提升的权限。 Sybase Sybase M-Business Anywhere 7.x Sybase Sybase M-Business Anywhere 6.x 厂商补丁： Sybase ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sybase.com/...

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE including Trinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE includingTrinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...