ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage: http://www.manageengine.com/products/device-expert/ file tested: ManageEngineDeviceExpert.exe tested against:...

DDoS Attacks Take on Political Motivations as Attackers Evolve

DDoS attacks come in all shapes and sizes, and in a lot of cases, the victims of the attacks don’t much care who is executing the attack or why. They just know that their network is being overwhelmed with junk traffic. But the last year has seen a major volume of politically motivated attacks, an...

Radware's Attack Mitigation System Delivers the First Fully Integrated Solution to Fight Cyber Attacks in Real Time

Radware's Attack Mitigation System Delivers the First Fully Integrated Solution to Fight Cyber Attacks in Real Time The solution blocks the new breed of sophisticated attacks that target Multiple layers of the IT infrastructure . Today's point security tools for IT infrastructures are not enough ...

Paypal gives FBI the list of IP Address of 1,000 Anomymous hackers

Paypal gives FBI the list of IP Address of 1,000 Anomymous hackers Paypal collected 1000 IP addresses of those carrying out Anonymous' DDoS attacks against PayPal last December. To be fair the names on the list will probably be the bottom feeding script kiddies rather than the hackers at the top ...

Paypal gives FBI the list of IP Address of 1,000 Anomymous hackers

Paypal gives FBI the list of IP Address of 1,000 Anomymous hackers Paypal collected 1000 IP addresses of those carrying out Anonymous' DDoS attacks against PayPal last December. To be fair the names on the list will probably be the bottom feeding script kiddies rather than the hackers at the top ...

Alteon OS XSS / XSRF

Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS and XSRF vulnerabilities were identified in the Alteon OS Browser-Based Interface BBI. Application: Alteon OS BBI Versions Affected: Nortel XSRF /switchSystem.html/bar?banner=newBanner/scri...

[DSECRG-09-062] Alteon OS BBI (Nortell) - Multiple Vulnerabilities

Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS and XSRF vulnerabilities were identified in the Alteon OS Browser-Based Interface BBI. Application: Alteon OS BBI Versions Affected: = 21.0.8.3 and may be higher =25.1.0.0 Vendor URL:...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS XSRF

No description provided by source. Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: = 21.0.8.3 and may be higher =25.1.0.0 Tested on: relevant os Code : exploit code From: DSecRG research dsecr...

Code injection

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

CVE-2009-2301

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

CVE-2009-2301

The CVE-2009-2301 entry concerns the Radware AppWall Web Application Firewall (WAF) version 1.0.2.6 with Gateway 4.6.0.2. The vulnerability allows remote attackers to read source code by directly requesting one of three files (Management/.)(funcs.inc, defines.inc, msg.inc). The underlying issue i...

CVE-2009-2301

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

CVE-2009-2301: Improper Input Validation

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

Unfixed XSS vulnerability at www.radware.com

Security researcher Uber0n, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting www.radware.com, which at the time of submission ranked 304792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currentl...