7885 matches found
TELUS Security Labs VR - Symantec Alert Management System HNDLRSVC Arbitrary Command Execution
Symantec Alert Management System HNDLRSVC Arbitrary Command Execution TSL ID: FSC20100727-01 1. Affected Software Symantec Antivirus Corporate Edition 10.1.8.8000 and possibly prior Symantec System Center 10.1.8.8000 and possibly prior Reference:...
Multiple Vulnerabilities in RunCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in RunCMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in RunCMS The vulnerability exists due to input sanitation error in the "rc2user...
100 BitTorrent Users Do Most Illegal Sharing
BitTorrent, the peer to peer file sharing network, has gained a reputation for enabling the masses to share and distribute files. But when it comes to sharing copyrighted content, just 100 users are responsible for most of the content. The findings, published by academic researchers in Spain,...
Oracle Document Capture - Actbar2.ocx Insecure Method
Source: http://packetstormsecurity.org/files/view/97866/DSECRG-11-004.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure metho...
sap crystal report server 2008 - Directory Traversal
Source: http://packetstormsecurity.org/files/view/97865/DSECRG-11-003.txt ÇDSECRG-11-003 Internal DSECRG-00145 SAP Crystal Report Server 2008 - Directory Traversal Directory traversal vulnerability discovered in the module PerformanceManagement application SAP Crystal Report Server 2008, which...
sap crystal report server 2008 - Directory Traversal
sap crystal report server 2008 - Directory Traversal Source: http://packetstormsecurity.org/files/view/97865/DSECRG-11-003.txt ÇDSECRG-11-003 Internal DSECRG-00145 SAP Crystal Report Server 2008 - Directory Traversal Directory traversal vulnerability discovered in the module PerformanceManagement...
Oracle Document Capture Actbar2.ocx Insecure Method
Exploit for windows platform in category remote exploits Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting Exploits: YES Reported: 22.03.2010 Vendor response: 31.03.2010 Date of Public Advisory:24.01.2011...
[DSECRG-00145] SAP Crystal Reports 2008 - Directory Traversal
DSECRG-11-003 Internal DSECRG-00145 SAP Crystal Report Server 2008 - Directory Traversal Directory traversal vulnerability discovered in the module PerformanceManagement application SAP Crystal Report Server 2008, which allows you to read any file on the OS. Application: SAP Crystal Report Server...
Oracle Document Capture empop3.dll Insecure Methods
Exploit for windows platform in category remote exploits Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting, File deleting Exploits: YES Reported: 22.03.2010 Vendor response: 31.03.2010 Date of Public...
Oracle Document Capture Insecure READ Method
Exploit for windows platform in category remote exploits Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: http://www.oracle.com/technology/software/products/content-management/indexdc.html Bugs: Insecure READ method Exploits: YES Reported: 29.01.2010 Second report:...
Oracle Document Capture - empop3.dll Insecure Methods
Oracle Document Capture - empop3.dll Insecure Methods Source: http://packetstormsecurity.org/files/view/97868/DSECRG-11-005.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture...
Oracle Document Capture - 'empop3.dll' Insecure Methods
Source: http://packetstormsecurity.org/files/view/97868/DSECRG-11-005.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.c...
Oracle - Document Capture Insecure READ Method
Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...
Oracle Document Capture Actbar2.ocx Insecure Method
ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting Exploits: YES Reported: 22.03.2010 Vendor response:...
Oracle Document Capture Insecure READ Method
Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL: http://www.oracle.com/technology/software/products/content-management/indexdc.html Bugs: Insecure READ method Exploits: YES Reported...
Multiple Vulnerabilities in ViArt Shop
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ViArt Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in ViArt Shop The vulnerability exists due to input sanitation...
Oracle Document Capture empop3.dll Insecure Methods
ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting, File deleting Exploits: YES...
IGNOU Website SQL Injection
IGNOU currently serves approximately 3.8 million students in India and 40 countries abroad in twenty one schools and a network of 59 regional centres, 7 sub-regional centres, 2600 study centres, and 52 overseas centres. IGNOU website is somehow vulnerable to SQL Injection & Weak Authentication...
Multiple Vulnerabilities in ReOS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...
After A Lull, Botnets Back In Business
After a lull in the fourth quarter of 2010, spam appears to be back in full force, according to reports from both Websense, Commtouch and Symantec Corp.Spam volume was up 45% in the first half of January after diving in Q4 according to a Commtouch spam report. Reports show the recently dormant...