RealAdmin (detail.php) Blind SQL Injection Vulnerability

No description provided by source. RealAdmin detail.php Blind Sql Injection Vulnerability ======================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : RealAdmin .:. Download Script:...

Creative SplashWorks-SplashSite (page.php) Blind SQL Injection Vulnerability

No description provided by source. .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Creative SplashWorks-SplashSite .:. Language : php .:. Bug Type : Blind Sql Injection .:. Dork : Website Powered By Creative SplashWorks - SplashSite === Exploit ===...

Plex Media Server 0.9.9.2.374-aa23a69 - Multiple Vulnerabilities

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20140228-1 ======================================================================= title: Authentication bypass SSRF and local file disclosure product: Plex Media Server vulnerable version: =0.9.9.2.374-aa23a69 fix...

Joomla Component com_simplefaq (catid) Blind SQL Injection Vulnerability

No description provided by source. Joomla Component comsimplefaq catid Blind Sql Injection Vulnerability ========================================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Team : Sec Attack Team .:. Email : [email protected] .:. Home : www.sec-attack.com/vb .:...

Blue Dove SQL Injection Vulnerability

No description provided by source. .:. Author : HackXBack [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Blue Dove Word Press Development .:. Bug Type : Sql Injection .:. Dork : powered by Blue Dove Web Design === Exploit ===...

intuitive (form.php) SQL Injection Vulnerability

No description provided by source. intuitive form.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Script : http://www.intuitive-websites.com/ .:. Bug Type ...

Simple Portal <= 2.0 - Auth Bypass

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

boastMachine 3.1 - Remote File Upload Vulnerability

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : boastMachine v3.1 Remote File Upload Vulnerability Author: alnjm33 Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip Software...

CVE-2014-2005

CVE-2014-2005 concerns Sophos Disk Encryption (SDE) 5.x managed via Sophos Enterprise Console (SEC) 5.x, prior to 5.2.2. It allows an unauthenticated, physically proximate attacker to resume from sleep without a login screen, gaining desktop access. Affected: SDE/SEC stack; root cause: failure to...

CVE-2014-2005: Improper Authentication

Sophos Disk Encryption SDE 5.x in Sophos Enterprise Console SEC 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen...

openSUSE Security Update : nfs-utils (openSUSE-SU-2013:1016-1)

This update of nfs-utils includes several bug and security fixes. - gssd-reverse-dns-fix: Allow DNS lookups to be avoided when determining kerberos identity of server. The GSSDOPTIONS sysconfig variable is added so that use of DNS can be enforced for sites that need it. bnc813464 CVE-2013-1923 -...

openSUSE Security Update : wireshark (openSUSE-SU-2013:1295-1)

Wireshark was updated to 1.8.9 bnc831718 + vulnerabilities fixed : - The Bluetooth SDP dissector could go into a large loop CVE-2013-4927 wnpa-sec-2013-45 - The DIS dissector could go into a large loop CVE-2013-4929 wnpa-sec-2013-47 - The DVB-CI dissector could crash CVE-2013-4930 wnpa-sec-2013-4...

WebTitan 4.01 (Build 68) - Multiple Vulnerabilities

WebTitan 4.01 Build 68 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: WebTitan vulnerable version: 4.01 Build 68 fixed version: 4.04 impact: critic...

WebTitan 4.01 (Build 68) - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: WebTitan vulnerable version: 4.01 Build 68 fixed version: 4.04 impact: critical homepage: http://www.webtitan.com found:...

New National Exam Program Risk Alert

In case you missed the most recent National Exam Program Risk Alert, you might want to head over to their website and determine what this may mean for you and your company. Since this may be a topic at your next board meeting, you should be prepared to answer any potential questions. Your board...

WD Arkeia Virtual Appliance Directory Traversal / Command Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Path Traversal/Remote Code Execution product: WD Arkeia Virtual Appliance AVA vulnerable version: All Arkeia Network Backup releases ASA/APA/AVA since 7.0.3. fixed versio...

SEC Consult SA-20140402-0 :: Multiple vulnerabilities in Rhythm File Manager

SEC Consult Vulnerability Lab Security Advisory 20140402-0 ======================================================================= title: Multiple vulnerabilities product: Rhythm Software File Manager Rhythm Software File Manager HD vulnerable version: File Manager 1.16.6 File Manager HD 1.11.5...

SEC Roundtable

On Wednesday, I attended a roundtable discussion the Securities and Exchange Commission held to gather information on cybersecurity trends and potential disclosure requirements for regulated public companies and stock exchanges...

wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

Plex Media Server 0.9.9.2.374-aa23a69 Bypass / File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authentication bypass SSRF and local file disclosure product: Plex Media Server vulnerable version: =0.9.9.3 impact: Critical homepage: http://www.plex.tv found: 2014-02-...