[IVIZ-08-004] Intel BIOS Plain Text Password Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-004 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

Intrinsic Swimage Encore does not securely manage login credentials

Overview Intrinsic Swimage Encore has an unencrypted, hardcoded, default password that could allow an attacker access to protected data. Description Intrinsic Swimage Encore automates remote desktop, server, and device deployment. This product includes both a server and a client solution. The...

viart-sql.txt

GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in ViArt that allows for an attacker to...

ViArt Shop 3.5 - 'category_id' SQL Injection

GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in ViArt that allows for an attacker to...

Local information disclosure in WeFi Client v3.3.3.0

================================================== INFO ================================================== The wireless client, WeFi v3.3.3.0 is susceptible to a local information disclosure due to irresponsible coding. Earlier versions may also be affected...

molegroupreal-sql.txt

-+================================================================================+- -+ Real Estate Script = 1.1 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 8 JULY 2008 Script...

alstrasoft-sql.txt

-+================================================================================+- -+ AlstraSoft AskMe Pro = 2.1 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 10 JUNE 2008 Script...

AlstraSoft AskMe Pro <= 2.1 Multiple SQL Injection Vulnerabilities

No description provided by source. -+================================================================================+- -+ AlstraSoft AskMe Pro = 2.1 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz...

Pre News Manager <= 1.0 (index.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Pre News Manager = 1.0 index.php id SQL Injection Vulnerability ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...

AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-...

Feedback and Rating Script 1.0 (detail.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Feedback and Rating Script 1.0 detail.php SQL Injection Vulnerability =======================================================================...

AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability ========================================================================...

ajdating-sql.txt

--==+================================================================================+==-- --==+ AJ Dating 1.0 viewprofile.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On:...

Pre Shopping Mall 1.1 - search.php SQL Injection

Pre Shopping Mall 1.1 - search.php SQL Injection --==+================================================================================+==-- --==+ Pre Shopping Mall 1.1 SQL Injection Vulnerablity +==-- --==+================================================================================+==--...

simplecustomer-sql.txt

--==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 18 April 2008...

Simple Customer 1.2 - 'contact.php' SQL Injection

--==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 18 April 2008...

Simple Customer 1.2 - contact.php SQL Injection

Simple Customer 1.2 - contact.php SQL Injection --==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==--...

Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Simple Customer 1.2 contact.php id SQL Injection Vulnerability ================================================================...

My Gaming Ladder 7.5 - ladderid SQL Injection

My Gaming Ladder 7.5 - ladderid SQL Injection --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-...