Discuz 6.0 SQL Injection

Securitylab.ir Application Info: Name: Discuz Version: 6.0 Website: http://www.discuz.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium Dork: © 2008 - 2009...

SAP NetWeaver Cross Site Scripting

http://www.dsecrg.com/pages/vul/show.php?id=133 Digital Security Research Group DSecRG Advisory DSECRG-09-033 Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date ...

Joe Grand on the DEFCON Badge, Hacking Parking Meters and the Hazards of Security Research

Dennis Fisher talks with Joe Grand of Grand Idea Studio about the design for this year’s DEFCON badge, the secret feature he added that no one has uncovered yet and his research on hacking smart parking meters. Download SHOW NOTES: Hacking The Defcon 2009 Badge Subscribe to the Digital Undergroun...

Admin News Tools 2.5 - 'fichier' Remote File Disclosure

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...

Admin News Tools 2.5 - fichier Remote File Disclosure

Admin News Tools 2.5 - fichier Remote File Disclosure Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts:...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir &...

citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

citrix xencenterweb - Cross-Site Scripting SQL Injection Remote Code Execution

citrix xencenterweb - Cross-Site Scripting SQL Injection Remote Code Execution Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL:...

dedecms v5.3 Arbitrary File Upload Vulnerability

Securitylab.ir Application Info: Name: dedecms Version: v5.3 Website: http://dedecms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk: High...

Researchers to Show Off Veiled Browser Darknet

One of the more interesting presentations on the schedule at next month’s Black Hat conference is a talk by renowned Web security researcher Billy Hoffman of HP on a new method for implementing a darknet in browsers using just PHP and JavaScript. The approach, which Hoffman and his co-presenter...

[Full-disclosure] CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities CA Advisory Reference: CA20090615-01 CA Advisory Date: 2009-06-15 Reported By: iViZ Security Research Team Impact: A remote attacker can cause a denial of servic...

Unfixed XSS vulnerability at stavrakoudis.econ.uoi.gr

Security researcher TurKPoweR, has submitted on 13/06/2009 a cross-site-scripting XSS vulnerability affecting stavrakoudis.econ.uoi.gr, which at the time of submission ranked 102075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

SAP GUI 6.4 - ActiveX Accept Remote Buffer Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= SAP GUI 6.4 ActiveX Accept Remote Buffer Overflow PoC ======================================================= Digital Security Research Group DSecRG Advisory DSECRG-09-015 Application: SAP G...

ECShop PHP Code Execution

Securitylab.ir Application Info: Name: ecshop Version: 2.6.2 Website: http://www.ecshop.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: info@securitylabdotir & [email protected] =========================================================== :: integrate.php :: if...

Microsoft warns of dangerous DirectShow flaw, attacks

Microsoft today warned that hackers are using rigged QuickTime media files to exploit an unpatched vulnerability in DirectShow, the APIs used by Windows programs for multimedia support. The company has activated its security response process to deal with the zero-day attacks has issued a pre-patc...

LxBlog XSS / SQL Injection

Securitylab.ir Application Info: Name: LxBlog Website: http://www.lxblog.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql/Xss Risk: Medium =========================================================...

Namad Cms Remote File Download

Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download Vulnerability Risk: Medium Dork: "Copyrigh...