Design/Logic Flaw

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call...

Improper access control

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request...

CVE-2013-0652

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call...

CVE-2013-0651

The CVE-2013-0651 issue affects GE Intelligent Platforms Proficy Real-Time Information Portal. A misconfiguration in the Portal installation places sensitive files under the web root with insufficient access control, allowing unauthenticated remote retrieval of configuration data and data-source ...

CVE-2013-0651

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request...

CVE-2013-0652

CVE-2013-0652 (GE Proficy Real-Time Information Portal) is an information disclosure vulnerability in GE’s Proficy Real-Time Information Portal. The issue arises because the portal exposes methods of an unspecified Java class via Java RMI, allowing an unauthenticated remote attacker to obtain a u...

Piwigo 2.4.6 Full Path Disclosure Vulnerability

Successful exploitation of this vulnerability may allow an attacker to obtain the real path of the Piwigo installation. Exploit Title: Piwigo 2.4.6 Full Path Disclosure Vulnerability Date: 01/12/2013 Exploit Author: email protected - http://la.usch.io -...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics...

Cogent Real-Time Systems Vulnerabilities

Overview Dillon Beresford of Cimation has identified four vulnerabilities in the Cogent Real-Time Systems DataHub application. Cogent has produced an update that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely. Affected Products Cogent Real-Time Systems reports...

ICEstate SQL Injection Vulnerability

ICEstate Real Estate Marketplace suffers from a remote SQL injection vulnerability. '/ -.- ------------------------------oOO------OOo----------------------------------- | ICEstate Real Estate Marketplace SQL Injection Vulnerability |...

Indian Government Wiretapping and started BlackBerry interception

According to a report, All major Indian telecom companies, including Bharti Airtel, Vodafone India and Tata Tele services, have agreed to share real-time interception of BlackBerry calls and data services on their networks with Security agencies to meet the December 31 deadline fixed by the India...

ICEstate SQL Injection

'/ -.- ------------------------------oOO------OOo----------------------------------- | ICEstate Real Estate Marketplace SQL Injection Vulnerability | -------------------------------------------------------------------------------- ! Discovered: cr4wl3r ! Site: http://bastardlabs.info ! Download:...

Real Networks RealPlayer < 16.0.0.282 Multiple Vulnerabilities

Binary data 6652.prm...

A Look Back at 2012: The Armory

As we are mere hours away from celebrating 2013, we'd like to focus today on M-Unition's Armory channel. The Armory is the place to be if you want to be the first to find out about the latest releases, free tools and of course, our ever popular M-Trends report. The most popular posts in this...

Low: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Joomla! Component com_jooproperty 1.13.0 - Multiple Vulnerabilities

Joomla! Component comjooproperty 1.13.0 - Multiple Vulnerabilities 1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Joomla comjooproperty SQL injection && Cross site scripting Vulnerability Dork:...

Joomla Component com_jooproperty Sql Injection / Xss Vulnerability

JooProperty is a real estate component developed for Joomla 1.7 and 2.5 with complex integrated booking features, price calculation for different seasons and comment and rating functions. The component is based on com-property for Joomla 1.5 of Fabio Ueltzinger and offers the possibility to impor...

Joomla! Component com_jooproperty 1.13.0 - Multiple Vulnerabilities

1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Joomla comjooproperty SQL injection && Cross site scripting Vulnerability Dork: inurl:comjooproperty Date: 10-12-2012 Author: Daniel Barragan "D4NB4R" Twitter:...

UBUNTU-CVE-2012-6062

The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

WordPress FS-Real-Estate SQL Injection

|| | || || | | | | 0 | In the name of iran | -|- | | | ||||| Exploit Title: Wordpress fs-real-estate-plugin/ Theme SQL Injection | Google Dork: inurl:/madebymilk/xml/markerlistings.xml | Exploit Author: Novin hack Category: Web Application Tested on: Windows 7 | | Location:...