Apple Mac OS X Server 10.5 - Wiki Server Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28278/info Apple Mac OS X Server Wiki Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary...

ILIAS 4.4.1 - Multiple Vulnerabilities

No description provided by source. ============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias.de...

Cybozu Remote Service Manager vulnerable to session fixation

Overview Remote Service Manager provided by Cybozu,Inc. is a software to access on-premise systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a session fixation vulnerability. Impact A remote, unauthenticated attacker may impersonate a registered user. As...

Zavio IP Camera Firmware 1.6.03 User Code Execution - Ver2 (CVE-2013-2568)

A code execution vulnerability has been reported in Zavio IP Camera Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system and gain the credentials of registered users...

QNX 6.x Photon Denial Of Service / File Overwrite

QNX 6.x Photon denial of service vulnerability by cenobyte 2013 - vulnerability description: QNX setuid root /usr/photon/bin/Photon allows users to create new servers with arbitrary filenames registered with the -N parameter. Photon does not check whether files exist and/or the owner of the ile i...

CVE-2014-0743

The Certificate Authority Proxy Function CAPF component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468...

ILIAS 4.4.1 - Multiple Vulnerabilities

============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias.de ============================================================== First from admin user logged...

Apple's Developer Center Offline for 32 Hours; Compromised ?

It's been over a day now since Apple's online Dev Center went offline, and latest message can be seen in the screenshot, which explains that the current maintenance has took a lot longer than they expected. "We apologize that maintenance is taking longer than expected. If your program membership...

MLS Property Finder Improper Access Control Vulnerability

MLS Property Finder has Improper Access Control Vulnerability. The website CMS does not restrict access to the "/update" path to a registered member. A registered member can access into the Website CMS Manager and Managing the Website through "/update" path via URL without Realtor Site Author...

Memo Dog arbitrary file delete-bug warning-the black bar safety net

Use Conditions: 1. Only limited to windows hosts,linux is invalid, at least in my present machine.） 2. Registered user 3. Need to delete of the file can read and write In modules/ajax/event. mod. php www.xxxx.com Protective remove the picture function doUnlink$pic if!$ pic return false; $type =...

Shopware 3.5 - SQL Injection

Shopware 3.5 - SQL Injection !/usr/bin/php ?php Exploit Title: Shopware 3.5 - SQL Injection Date: 13.07.2012 Exploit Author: Kataklysmos Software Link: http://www.shopware.de/ Version: 3.5 function httpreq$host, $q if!$fs = fsockopen$host, 80 exit"Could not open HTTP- Connection to...

WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure

source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can exploit this issue to obtain sensitive information that may aid in...

WordPress Email Newsletter 8.0 Information Disclosure

Description : Wordpress Plugins - Email Newsletter Information Disclosure Vulnerability Version : 8.0 Link : http://wordpress.org/extend/plugins/email-newsletter/ Plugins : http://downloads.wordpress.org/plugin/email-newsletter.zip Date : 28-05-2012 Google Dork :...

vBulletin 4.1.12 Cross Site Scripting

TITLE ....... vBulletin 4.1.12 Reflected XSS try csrf for registered users DATE ........ 24.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1...

Note the dog design defect causes can delete the website of any picture-vulnerability warning-the black bar safety net

The path to improper handling resulting in a registered user can delete the site on any picture Detailed description: To register a user, after login click on upload avatar, for example, the address is: http://www.badguest.cn /jishigou30s/index. php? mod=settings&code=face In the end...

Multiple vulnerabilities in OBM

No description provided by source. Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinobm.html Product: OBM Vendor: obm.org http://obm.org Vulnerable Version: 2.4.0-rc13 and probably prior Tested Version: 2.4.0-rc13 Vendor Notification: 30 November 2011 Vulnerability Type: XSS,...

Do not show registered users in quick search to anonymous users

Registered users appears in quick search, even when it's a search made by anonymous...

Wind noise dotNETCMS 0day-vulnerability warning-the black bar safety net

Brief description: File upload Detailed description: Vulnerability in the user page, the registered user. Article management, upload of.. Select the file name unchanged.... Upload 1. asp;,jpg And then you know Vulnerability to prove: ! ! !...

phpList 2.10.x - Security Bypass Information Disclosure

phpList 2.10.x - Security Bypass Information Disclosure source: https://www.securityfocus.com/bid/49188/info PHPList is prone to a security-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain access to sensitive information and send...

phpList 2.10.x - Security Bypass / Information Disclosure

source: https://www.securityfocus.com/bid/49188/info PHPList is prone to a security-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain access to sensitive information and send arbitrary messages to registered users. Other attacks are als...