Admin News Tools 2.5 - fichier Remote File Disclosure

Admin News Tools 2.5 - fichier Remote File Disclosure Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts:...

citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

citrix xencenterweb - Cross-Site Scripting SQL Injection Remote Code Execution

citrix xencenterweb - Cross-Site Scripting SQL Injection Remote Code Execution Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL:...

dedecms v5.3 Arbitrary File Upload Vulnerability

Securitylab.ir Application Info: Name: dedecms Version: v5.3 Website: http://dedecms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk: High...

Researchers to Show Off Veiled Browser Darknet

One of the more interesting presentations on the schedule at next month’s Black Hat conference is a talk by renowned Web security researcher Billy Hoffman of HP on a new method for implementing a darknet in browsers using just PHP and JavaScript. The approach, which Hoffman and his co-presenter...

[Full-disclosure] CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities CA Advisory Reference: CA20090615-01 CA Advisory Date: 2009-06-15 Reported By: iViZ Security Research Team Impact: A remote attacker can cause a denial of servic...

Unfixed XSS vulnerability at stavrakoudis.econ.uoi.gr

Security researcher TurKPoweR, has submitted on 13/06/2009 a cross-site-scripting XSS vulnerability affecting stavrakoudis.econ.uoi.gr, which at the time of submission ranked 102075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

SAP GUI 6.4 - ActiveX Accept Remote Buffer Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= SAP GUI 6.4 ActiveX Accept Remote Buffer Overflow PoC ======================================================= Digital Security Research Group DSecRG Advisory DSECRG-09-015 Application: SAP G...

ECShop PHP Code Execution

Securitylab.ir Application Info: Name: ecshop Version: 2.6.2 Website: http://www.ecshop.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: info@securitylabdotir & [email protected] =========================================================== :: integrate.php :: if...

Microsoft warns of dangerous DirectShow flaw, attacks

Microsoft today warned that hackers are using rigged QuickTime media files to exploit an unpatched vulnerability in DirectShow, the APIs used by Windows programs for multimedia support. The company has activated its security response process to deal with the zero-day attacks has issued a pre-patc...

LxBlog XSS / SQL Injection

Securitylab.ir Application Info: Name: LxBlog Website: http://www.lxblog.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql/Xss Risk: Medium =========================================================...

Namad Cms Remote File Download

Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download Vulnerability Risk: Medium Dork: "Copyrigh...

DMXReady Registration Manager 1.1 Shell Upload

Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk...

DMXReady Registration Manager 1.1 - Arbitrary File Upload

DMXReady Registration Manager 1.1 - Arbitrary File Upload Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

DMXReady Registration Manager 1.1 - Arbitrary File Upload

Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk...

MoonCat Information Changer

Securitylab.ir Application Info: Name: MoonCat Website: http://olpkeps.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Info Change Risk: Low Dork: "Design by OLPKEPS.COM"...

Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure

Namad IMenAfzar 2.0.0.0 - Remote File Disclosure Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File...