[RT-SA-2012-001] Bugzilla: Cross-Site Scripting in Chart Generator

Advisory: Bugzilla: Cross-Site Scripting in Chart Generator RedTeam Pentesting discovered a Cross-Site Scripting XSS vulnerability in Bugzilla's chart generator during a penetration test. If attackers can persuade users to click on a prepared link or redirected them to such a link from an...

Bugzilla Chart Generator Cross Site Scripting

Advisory: Bugzilla: Cross-Site Scripting in Chart Generator RedTeam Pentesting discovered a Cross-Site Scripting XSS vulnerability in Bugzilla's chart generator during a penetration test. If attackers can persuade users to click on a prepared link or redirected them to such a link from an...

[RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass

Advisory: Owl Intranet Engine: Authentication Bypass During a penetration test, RedTeam Pentesting discovered an Authentication Bypass vulnerability in the Owl Intranet Engine, which allows unauthenticated users administrative access to the affected systems. Details ======= Product: Owl Intranet...

RedTeam Pentesting GmbH

Advisory: Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes The Owl Intranet Engine uses no salting in the password hashing procedure. Furthermore, users in the "Administrators" group are able to see the MD5 password hashes of every user using the web interface. Details...

Owl Intranet Engine 1.00 Authentication Bypass

Advisory: Owl Intranet Engine: Authentication Bypass During a penetration test, RedTeam Pentesting discovered an Authentication Bypass vulnerability in the Owl Intranet Engine, which allows unauthenticated users administrative access to the affected systems. Details ======= Product: Owl Intranet...

[RT-SA-2011-004] Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface

Advisory: Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface The ZyXEL ZyWALL USG appliances perform parts of the authorization for their management web interface on the client side using JavaScript. By setting the JavaScript variable "isAdmin" to "true", a user with limited acce...

Nostromo 1.9.3 Directory Traversal

Advisory: nostromo nhttpd directory traversal leading to arbitrary command execution During a penetration test, RedTeam Pentesting discovered a directory traversal vulnerability leading to arbitrary command execution in the nostromo HTTP server. Details ======= Product: nostromo nhttpd Affected...

SugarCRM 6.1.1 Privilege Restriction Bypass

Advisory: SugarCRM list privilege restriction bypass RedTeam Pentesting discovered a vulnerability in SugarCRM that allows logged in users to bypass restrictions of their list privilege, allowing to list all entries. Details ======= Product: SugarCRM Community Edition SugarCRM Professional SugarC...

[RT-SA-2011-002] SugarCRM list privilege restriction bypass

Advisory: SugarCRM list privilege restriction bypass RedTeam Pentesting discovered a vulnerability in SugarCRM that allows logged in users to bypass restrictions of their list privilege, allowing to list all entries. Details ======= Product: SugarCRM Community Edition SugarCRM Professional SugarC...

JBoss JMX - Console Deployer Upload and Execute (Metasploit)

$Id: jbossmaindeployer.rb 10754 2010-10-19 22:24:33Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JBoss - Java Class DeploymentFileRepository WAR Deployment (Metasploit)

$Id: jbossdeploymentfilerepository.rb 9950 2010-08-03 15:14:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JBoss JMX Console Beanshell Deployer WAR Upload And Deployment

$Id: jbossbshdeployer.rb 9596 2010-06-23 22:25:03Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CSRF in PHPWCMS 1.4.5

?php / Exploit Title: PHPWCMS Cross-Site Request Forgery Vulnerability Date: 06/16/2010 Author: Jeremiah Talamantes Software Link: http://phpwcms.googlecode.com/files/phpwcmsr398.zip Version: 1.4.5 r398 Tested on: WinXP SP2 EN on WAMP 2.0 CVE: N/A Jeremiah Talamantes RedTeam Security RedTeam Labs...

FrogCMS 0.9.5 Cross Site Request Forgery

Software : FrogCMS v0.9.5 Author : Jeremiah Talamantes for RedTeam Security Date : June 10, 2010 OS : Windows Tested on : XP SP2 EN Virtual PC Type of vuln : CSRF Description : Lack of security controls in place to prevent Cross Site Request Forgery attacks. The POC below will open a core module...

TYPSoft FTP Server RETR Command DoS

No description provided by source. Exploit Title: TYPSoft FTP Server RETR Command DoS Date: 5/13/2010 Author: Jeremiah Talamantes Software Link: Version: 1.10 Tested on: Windows XP, SP2 EN CVE : N/A !/usr/bin/python print "\n" print " RedTeam Security " print " TYPSoft FTP Server RETR Command DoS...

TYPSoft 1.0 RETR Denial Of Service

Exploit Title: TYPSoft FTP Server 1.10 RETR Command DoS Date: 5/13/2010 Author: Jeremiah Talamantes RedTeam Security Software Link: http://sourceforge.net/projects/ftpserv/ Version: 1.10 Tested on: Windows XP, SP2 EN DESCRIPTION: This script exploits a weakness in the RETR command in TYPSoft v1.1...

SmallFTPd 1.0.3 - 'DELE' Denial of Service

Tested on: Windows XP, SP2 EN !/usr/bin/python print "\n" print " RedTeam Security " print " SmallFTPD FTP Server DELE Command DoS " print " Version 1.0.3 " print " " print " Jeremiah Talamantes " print " [email protected] " print " \n" import socket import sys Define the exploit's usage def...

TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service (Metasploit)

Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID: Author: Jeremiah Talamantes Published: 2010-05-02 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework we...

TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service (Metasploit)

TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service Metasploit Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID: Author: Jeremiah Talamantes Published: 2010-05-02 Verified: yes This file is part of the Metasploit Framework and may be subject to...

TFTPGUI v1.4.5 Long Transport Mode Overflow DoS (Meta)

Exploit for windows platform in category dos / poc ====================================================== TFTPGUI v1.4.5 Long Transport Mode Overflow DoS Meta ====================================================== Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID:...