Hackers release Windows Phone 8 Malware - to be showcased at MalCon

It's be Just hours Windows Phone 8 has been released - and hackers have already dished out a malware prototype for the platform. Windows Phone 8 is the second generation of the Windows Phone mobile operating system. Windows Phone 8 Microsoft's latest in mobile OS technology - comes in as a direct...

Dimensions social sharing system word vulnerability-vulnerability warning-the black bar safety net

Brief description: Profile filter is not strict, resulting in the word arbitrary code execution. Detailed description: Profile filter is not strict, the user-submitted code is saved, the template cache after the read again when the direct execution of user code! Vulnerability to prove: ! ! Repair...

PHP Support Tickets 1.9 Cross Site Scripting

Google dork: "PHP Support Tickets v1.9" inurl:index.php?action= "PHP Support Tickets v1.9" by "Triangle Solutions Ltd" allows XSS attack at index.php and some implementations also has a bad uploaded files validation allowing to upload a js with a jpg extension that could be using for bypassing XS...

Encryption: It's Complicated

Data breaches have become so common at this point that the mere fact that a government agency such as the South Carolina Department of Revenue loses several million Social Security numbers and credit card numbers isn’t really that noteworthy. It’s another day in the life of the Internet. But what...

2Point Solutions XSS / SQL Injection / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Knowledge Base EE v4.62.0 - SQL Injection Vulnerability

Title: ====== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability Date: ===== 2012-09-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...

Dd'Linux - SQL Injection / Cross-Site Scripting Vulnerabilities

Dd'linux provides business solutions and services based on Linux as the main OS.Given the form of licensing which is free software, these solutions do not require the degree of investment in licenses as required by commercial software.Our technical staff has experience since 1996 in the...

CVE-2012-3201

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

PT-2012-4560

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.0 Description The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it via unknown vectors related to Self-Service Student Records in the PeopleSoft Enterprise...

CVE-2012-3201

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

CVE-2012-3201

CVE-2012-3201 affects Oracle PeopleSoft 9.0, specifically the PeopleSoft Enterprise Campus Solutions component. The description indicates a vulnerability in Self-Service (Student Records) that could allow remote authenticated users to impact confidentiality via unknown vectors. The underlying cau...

CVE-2012-3201: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Self-Service Student Records...

New Mandiant Offering: Response Readiness Assessment

Today, I am pleased to announce the release of Mandiant's newest Strategic Solutions offering: Response Readiness Assessment. In this post, I'll explain what the service provides, why our customer's requested such a service, and who can benefit from the Response Readiness Assessment offering...

3S CoDeSys Vulnerabilities

Overview This advisory is a follow-up to the alert update, ICS-ALERT-11-336-01A 3S CoDeSys Vulnerabilities, which was released on the ICS-CERT Web page on December 02, 2011. Security researcher Celil Unuver SignalSec LLC and independent researcher Luigi Auriemma have identified vulnerabilities in...

Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection Exploit Author: Vulnerability-Lab Title: ====== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability Date: ===== 2012-09-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common...

Knowledge Base EE v4.62.0 - SQL Injection Vulnerability

Document Title: =============== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=700 Release Date: ============= 2012-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 700...

Knowledge Base EE v4.62.0 - SQL Injection Vulnerability

Document Title: =============== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=700 Release Date: ============= 2012-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 700...

Knowledge Base Enterprise Edition 4.62.0 - SQL Injection

Exploit Author: Vulnerability-Lab Title: ====== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability Date: ===== 2012-09-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common Vulnerability Scoring System: ====================================...