Cisco Collaboration Server 5 Cross Site Scripting / Code Disclosure

Title: Cisco Collaboration Server 5 XSS, Source Code Disclosure Author: s4squatch Published: 2010-02-11 Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

Cisco Collaboration Server 5 - Cross-Site Scripting Source Code Disclosure

Cisco Collaboration Server 5 - Cross-Site Scripting Source Code Disclosure Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

Cisco Collaboration Server 5 XSS, Source Code Disclosure

Exploit for unknown platform in category web applications ======================================================== Cisco Collaboration Server 5 XSS, Source Code Disclosure ======================================================== Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered...

Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure

Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering -- http://www.cisco.com/en/US/products/sw/custcosw/ps747/prodeolnotice09186a008032d4d0.html Replaced with:...

Sweden Will Handle NASA, Cisco Hacker

The prosecution of a Swedish man charged with breaching the computer networks of NASA and Cisco Systems and making off with sensitive source code will be transferred to Swedish authorities, US federal prosecutors said Monday. Read the full article. The Register...

Mongoose 2.8 - Space String Remote File Disclosure

source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may a...

BlackBerry Spyware Can Intercept Texts, Email, Track User's Location

A security researcher demonstrated a spyware program at the ShmooCon conference on Sunday that is capable of intercepting and recording text messages, emails, Web traffic and other data sent to and from BlackBerry devices. Tyler Shields, a senior security researcher at Veracode, showed a...

Phpwind7.5 后台本地包含漏洞

文件：hack\rate\admin.php 源码： ?php !functionexists'readover' && exit'Forbidden'; define "HR", RP . "hack/rate/" ; define "LR", RP . "lib/" ; InitGP array 'ajax' ; $action = strtolower $job ? $job : "admin" ; $filepath = HR . "action/" . $action . "Action.php"; ! fileexists $filepath && exit ; if $jo...

Solaris Update for PostgreSQL 8.3 source code 138824-06

Check for the Version of PostgreSQL 8.3 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.3 source code 138824-06 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for PostgreSQL 8.2 source code 137004-07

Check for the Version of PostgreSQL 8.2 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.2 source code 137004-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for PostgreSQL 8.2 source code 137005-07

Check for the Version of PostgreSQL 8.2 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.2 source code 137005-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for PostgreSQL 8.2 source code 137005-07

Check for the Version of PostgreSQL 8.2 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.2 source code 137005-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for PostgreSQL 8.3 source code 138825-06

Check for the Version of PostgreSQL 8.3 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.3 source code 138825-06 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for PostgreSQL 8.2 source code 137004-07

Check for the Version of PostgreSQL 8.2 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.2 source code 137004-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for PostgreSQL 8.3 source code 138824-06

Check for the Version of PostgreSQL 8.3 source code OpenVAS Vulnerability Test Solaris Update for PostgreSQL 8.3 source code 138824-06 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

The 2010 Threat Landscape

Costin Raiu, chief security expert at Kaspersky Lab in Romania, discusses the state of the threat landscape for the year ahead, including botnets, malicious PDFs and targeted attacks. Please note: Raiu is referring to media reports that attackers may have stolen some of Adobe’s source code. Adobe...

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

ezContents CMS 2.0.3 Bypass / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: ezContents CMS Multiple Vulnerabilities Vendor: http://ezcontents.org/ Vulnerable Version: 2.0.3 and prior versions Exploitation: Remote with browser Fix: N/A - Description: ezContents is a nice PHP CMS which allow management of dynamic...

CityShop v5. 5. 8 sql injection 0day&background get the webshell method-vulnerability warning-the black bar safety net

Text/My5t3ry Saw yesterday on the Forum a friend asked CitySHOP background how to get a SHELL, just under the source code back to read the next, find the code with the zend encryption. The decryption after the reading, the vulnerability also really many, many parameters are$GET straight into the...

FreePBX 2.5.x - Information Disclosure

Advisory Name: Information disclosure in FreePBX 2.5.x Internal Cybsec Advisory Id: 2010-0101 Vulnerability Class: Information disclosure Release Date: 15/01/2010 Affected Applications: Confirmed in FreePBX 2.5.x Other versions may also be affected Affected Platforms: Any running FreePBX2.5.x Loc...