Ajax File And Image Manager 1.1 Code Execution

----------------------------------------------------------- PT-2013-41 Positive Technologies Security Advisory Arbitrary Code Execution in Ajax File and Image Manager ----------------------------------------------------------- --- Vulnerable software Ajax File and Image Manager Version: 1.1 and...

PT-2013-64: Access Control Bypassing in Bitrix CMS

The specialists of the Positive Research center have detected an Access Control Bypassing vulnerability in Bitrix CMS. This vulnerability has been discovered in the integrity check mechanism of the "Script Integrity Monitor", which allows an attacker to forge the integrity check mechanism and...

PT-2013-63: Hash Length Extension in HTMLPurifier

The specialists of the Positive Research center have detected a vulnerability in HTMLPurifier that allows attackers to carry out a "Hash Length Extension" attack.. Class HTMLPurifierURIFilterMunge implements a URI filter that replaces all links with a formatted URL, for example, it can be used to...

PT-2013-49: Null Byte Injection in Oracle Containers for J2EE

The specialists of the Positive Research center have detected a Null Byte Injection vulnerability in Oracle Containers for J2EE. Oracle Containers for J2EE does not properly handle a null byte in the path when transferring a request to another static page or a JSP script via pageContext.forward o...

PT-2013-48: CRLF Injection in Oracle Containers for J2EE

The specialists of the Positive Research center have detected a CRLF Injection vulnerability in Oracle Containers for J2EE. Oracle Containers for J2EE does not properly validate the values from the HTTP headers. An attacker can use a crafted malicious HTTP response and display arbitrary data to t...

PT-2013-47: Directory Traversal in Oracle Containers for J2EE

The specialists of the Positive Research center have detected a Directory Traversal vulnerability in Oracle Containers for J2EE when running on Windows. Oracle Containers for J2EE does not properly handle a Request-URI sent by the client. An attacker can apply to an arbitrary script outside of th...

PT-2013-81: Cross-Site Request Forgery in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected a Cross-Site Request Forgery vulnerability in Siemens SIMATIC S7-1500 CPU PLC. The web server of the affected PLCs port 80/tcp and port 443/tcp might allow CSRF Cross-Site Request Forgery attacks, compromising integrity and availabilit...

PT-2013-82: Cross-Site Scripting in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Siemens SIMATIC S7-1500 CPU PLC. The integrated web server port 80/tcp and port 443/tcp of the affected device might be vulnerable to Cross-Site Scripting XSS attacks. How to fix Update your...

PT-2013-84: Insuffient Entropy in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected an Insuffient Entropy vulnerability in Siemens SIMATIC S7-1500 CPU PLC. Due to low entropy in its random number generator, the authentication of the integrated web server port 80/tcp and port 443/tcp of S7-1500 PLCs might allow attacke...

PT-2013-83: Arbitrary HTML Injection in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected an Arbitrary HTML Injection vulnerability in Siemens SIMATIC S7-1500 CPU PLC. The integrated web server port 80/tcp and port 443/tcp of the affected device might allow attackers to inject HTML headers. How to fix Update your firmware u...

PT-2013-87: Insuffient Entropy in Siemens SIMATIC S7-1200 CPU PLC

The specialists of the Positive Research center have detected an Insuffient Entropy vulnerability in Siemens SIMATIC S7-1200 CPU PLC. Due to low entropy in its random number generator, the integrated web server’s authentication method port 80/tcp and port 443/tcp could allow attackers to hijack w...

PT-2013-85: Open Redirect in Siemens SIMATIC S7-1500 CPU PLC

The specialists of the Positive Research center have detected an Open Redirect vulnerability in Siemens SIMATIC S7-1500 CPU PLC. The integrated web server port 80/tcp and port 443/tcp of the affected device might allow attackers to redirect users to untrusted websites. How to fix Update your...

Mod_Security Cross Site Scripting Bypass

Product: Modsecurity Author: Rafay Baloch Status: Fixed Details: The ModSecurity firewall is one of the most known WAF around, It has an online smoke test where we can check if a vector bypassed the regular expressions. Payload: It was though detecting null bytes, but it was generating a false...

PT-2013-53: Information Disclosure in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Huawei SGSN USN9810. Web application displays the system information such as the version of the web server, its components, and the details about the installation platform in the HTTP-response...

PT-2013-58: Insufficient Session Security in Huawei M2000

The specialists of the Positive Research center have detected an Insufficient Session Security vulnerability in Huawei M2000. Access rights storage mechanism is vulnerable to cryptographic attacks. An attacker may calculate the new checksum and obtain elevated privileges via brute force attack. H...

PT-2013-55: Access Restrictions Bypassing in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an Access Restrictions Bypassing vulnerability in Huawei SGSN USN9810. The platform does not provide sufficient entropy in session identifiers. This allows an attacker to brute force the current ID to bypass the authorization mechanism...

PT-2013-57: Password Access in Huawei M2000

The specialists of the Positive Research center have detected a Password Access vulnerability in Huawei SGSN USN9810. The application stores and displays the FTP server password in clear text. This vulnerability allows the attackers to hijack the password and obtain access to the FTP server. How ...

PT-2013-77: Using a weak hashing algorithm in SIMATIC WinCC Open Architecture

The specialists of the Positive Research center have detected an Using a weak hashing algorithm vulnerability in SIMATIC WinCC Open Architecture. The SIMATIC WinCC OA server application has a weak hashing algorithm for project users’ credentials. Attackers might be able to escalate their privileg...

PT-2013-56: Path Traversal in Huawei SGSN USN9810

The specialists of the Positive Research center have detected a Path Traversal vulnerability in Huawei SGSN USN9810. REPORTDIR parameter allows the use of symbols, which enable going beyond the current directory. How to fix Customers can contact the Huawei Technical Assistance Center TAC to reque...

PT-2013-54: Access Restrictions Bypassing in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an Access Restrictions Bypassing vulnerability in Huawei SGSN USN9810. The application does not sufficiently check the user’s authorization in the system. This allows an authorized attacker to obtain access to various administrative...