CVE-2012-4880

Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse 1 encmp2v.200 or 2 CFHDDecoder.dll file in the current working directory, as demonstrated by a directory that contains a...

CVE-2010-5234

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse 1 MFC90ENU.DLL or 2 MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenan...

KLA10099 LPE vulnerability in Camtasia Studio

An untrusted path vulnerability was found in Camtasia Studio. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking. Original advisories - Related products Camtasia-Studio CVE list CVE-2010-5234 high Solution Update to...

Two Microsoft Security Updates Await In Advance of Certificate Key Length Changes

Microsoft is promising a light load of security updates for next Tuesday’s monthly patch release in an attempt to give Windows administrators and security teams time to prepare for an October change to certificate key length requirements. Angela Gunn of Microsoft’s Security Response Team announce...

Studio-One CMS 1.11b / 1.7.1 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Vulnerable SoftwareS: CMS | 1.11b/CMS | 1.7.1 From Studio-one.am Vulnerabilities: This Content management systems suffers from Remote Blind SQl injection and Backdoor account. Software...

Plante Graffix SQL Injection

---------------------------------------------------------------- Plante Graffix SQL Injection ---------------------------------------------------------------- Exploit Title: Plante Graffix SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Site : http://net-w0lf.blogspot.com...

Studio-One CMS 1.11b / 1.7.1 Blind SQL Injection

======================================================== Vulnerable SoftwareS: CMS | 1.11b/CMS | 1.7.1 From Studio-one.am Vulnerabilities: This Content management systems suffers from Remote Blind SQl injection and Backdoor account. Software License: Commercial Vendor: studio-one.am Discovered an...

ZDI-12-180 : Novell ZENWorks AdminStudio ISGrid.dll ActiveX Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-180 : Novell ZENWorks AdminStudio ISGrid.dll ActiveX Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-180 August 29, 2012 - -- CVE ID: - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Novel...

CVE-2011-5139

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139

CVE-2011-5139 describes an SQL injection in the Pre Studio Business Cards Designer, specifically in the page.php file, where the vulnerable parameter is the id parameter. The vulnerability enables remote attackers to execute arbitrary SQL commands via that parameter. The NVD entry lists a base sc...

europ INNET Web Studio Administration Program 2.0 XSS / CSRF / LFI

====================================================== Vulnerable software: Administration Programm v 2.0 Vendor: europ INNET Web Studio, www.europ-innet.com ====================================================== Vulnerabilities: //insertguestbook.php ==============VULNERABLE CODE...

Advantech Studio ISSymbol ActiveX Control Multiple Buffer Overflow Vulnerabilities

Binary data scadaadvantechstudioissymbolactivexbof.nbin...

Advantech Studio Detection

Binary data scadaappadvantechstudiodetect.nbin...

WaveMaker < 6.4.6 Security Bypass

According to its self-reported version number, the version of WaveMaker installed on the remote host has a security bypass vulnerability. Any projects deployed with WaveMaker Studio before 6.4.6 are affected by this vulnerability. A remote attacker could exploit this by requesting project service...

WaveMaker Studio Requires No Authentication

The version of WaveMaker Studio detected on the remote host does not require authentication. A remote, unauthenticated attacker could exploit this to create, modify, and deploy projects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

WaveMaker Studio Detection

WaveMaker Studio, a WYSIWYG development studio, was detected on the remote host. This application is a component of the WaveMaker development platform. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid60061; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/22";...

Web Designs Studio CMS SQL Injection

Exploit Title : webdesigns-studio Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://webdesigns-studio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Site by...