Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

Synactis AllINTHEBOX ActiveX 3.0 - Null Byte File Overwrite Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

Exploit for unknown platform in category remote exploits ================================================================ Synactis AllINTHEBOX ActiveX v3 Null byte File Overwrite Vuln ================================================================ Digital Security Research Group DSecRG Advisory...

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported: 15.01.2009 Vendor response: NONE...

Synactic ALL_IN_THE_BOX File Overwrite

DSECRG-09-006 Synactis AllINTHEBOX ActiveX Control - Null byte File Owervrite Synactis AllINTHEBOX ActiveX Control ALLINTHEBOX.OCX can be used to owervrite any any file in target system. Vulnerable method is "SaveDoc" Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL:...

phplist 2.10.x (RCE by environ inclusion) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================================== phplist 2.10.x RCE by environ inclusion Local File Inclusion Exploit ====================================================================== phplist 2.10.x remote code...

Pixie CMS 1.0 Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solution: NONE Date of Public Advisory: 27.01.2009...

Pixie CMS 1.0 - Multiple Local File Inclusions

Pixie CMS 1.0 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solutio...

Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities =========================================================== Digital Security Research Group DSecRG Advisory DSECRG-09-0...

Pixie CMS 1.0 - Multiple Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solution: NONE Date of Public Advisory: 27.01.2009...

[DSECRG-09-004] AXIS 70U Network Document Server - Privilege Escalation and XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-004 AXIS 70U Network Document Server - Privilege Escalation and XSS http://dsecrg.com/pages/vul/show.php?id=60 Application: AXIS 70U Network Document Server Web Interface Versions Affected: 3.0 Vendor URL: http://www.axis.com/ Bug: Local...

AXIS 70U - Network Document Server Privilege Escalation Cross-Site Scripting

AXIS 70U - Network Document Server Privilege Escalation Cross-Site Scripting Digital Security Research Group DSecRG Advisory DSECRG-09-004 AXIS 70U Network Document Server - Privilege Escalation and XSS http://dsecrg.com/pages/vul/show.php?id=60 Application: AXIS 70U Network Document Server Web...

AXIS 70U Privilege Escalation / XSS

DSECRG-09-004 AXIS 70U Network Document Server - Privilege Escalation and XSS Vulnerabilities found in Web Interface of device AXIS 70U Network Document Server. 1. Local File Include and Privilege Escalation. Standard user can escalate privileges to administrator. 2. Multiple Linked XSS...

AXIS 70U - Network Document Server Privilege Escalation / Cross-Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-004 AXIS 70U Network Document Server - Privilege Escalation and XSS http://dsecrg.com/pages/vul/show.php?id=60 Application: AXIS 70U Network Document Server Web Interface Versions Affected: 3.0 Vendor URL: http://www.axis.com/ Bug: Local...

phpList <= 2.10.8 Local File inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: phpList Local File inclusion Vendor: http://www.phplist.com Bug: Local File Inclusion Vulnerable Version: 2.10.8 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...

Oracle Database 11G PL/SQL Injection

Digital Security Research Group DSecRG Advisory DSECRG-09-003 Application: Oracle database 11G Versions Affected: Oracle 11.1.0.6 and 10.2.0.1 Vendor URL: http://oracle.com Bugs: PL/SQL Injections Exploits: YES Reported: 17.11.2008 Vendor response: 18.11.2008 Last response: 24.11.2008 Date of...

Oracle Application Server Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...

phpList <= 2.10.8 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== phpList Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 AmnPardaz Security...

phpList 2.10.8 - Local File Inclusion

phpList 2.10.8 - Local File Inclusion www.BugReport.ir AmnPardaz Security Research Team Title: phpList Local File inclusion Vendor: http://www.phplist.com Bug: Local File Inclusion Vulnerable Version: 2.10.8 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original...

w3blabor CMS 3.3.0 SQL Injection

'/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo8 | -------------------------------------------------- | w3blabor CMS = v3.3.0 Admin Login Bypass | | requires...

w3blabor CMS <= 3.3.0 (Admin Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ w3blabor CMS = 3.3.0 Admin Bypass SQL Injection Vulnerability ================================================================ '/ -.-...