MayGion IP Cameras multiple vulnerabilities

Advisory ID Internal CORE-2013-0322 1. Advisory Information Title: MayGion IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0322 Date published: 2013-05-28 Date of last update: 2013-05-28 Vendors contacted: MayGion Release mode: Coordinated release 2. Vulnerability Information Class:...

TP-Link IP Camera Hardcoded Credentials / Command Injection

Core Security - Corelabs Advisory http://corelabs.coresecurity.com TP-Link IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: TP-Link IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0318 Advisory URL:...

Zavio IP Camera Command Injection / Bypass

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:...

Struts2 remote code execution vulnerability(S2-0 1 3) temporary solutions-vulnerability warning-the black bar safety net

Struts2 again broke remote code execution vulnerability, specifically as detailed in the Struts2 remote code execution vulnerability analysisS2-0 1 3 of The following is the LH Team out of a temporary solution: Modified files: org. apache. struts2. views. util. DefaultUrlHelper 2 8 1–2 8 4 lines:...

Apache-Struts IncludeParams < 2.3.14.1 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Wordpress Flagallery-Skins SQL Injection

Exploit Title : Wordpress Flagallery-skins plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Home : www.ashiyane.org Security Risk : Medium Dork : inurl:/wp-content/plugins/flagallery-skins/compactmusicplayer/gallery.php?playlist= Tested on: Linux...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Updated spacewalk-backend packages that fix one security issue are now available for Red Hat Network Satellite 5.3, 5.4, and 5.5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

WordPress Plugin ProPlayer 4.7.9.1 - SQL Injection

WordPress Plugin ProPlayer 4.7.9.1 - SQL Injection Exploit Title : WordPress ProPlayer Plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Plugin Link : http://wordpress.org/plugins/proplayer/ Home : www.ashiyane.org Security Risk : High Version : 4.7.9.1 Dork :...

WordPress ProPlayer Plugin SQL Injection

Exploit Title : WordPress ProPlayer Plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Plugin Link : http://wordpress.org/plugins/proplayer/ Home : www.ashiyane.org Security Risk : High Version : 4.7.9.1 Dork : inurl:wp-content/plugins/proplayer/playlist-controller.php?id= Teste...

SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass

This module will allow you to add Time-based One-time Password Algorithm also called "Two Step Authentication" or "Multi-Factor Authentication" support to user logins. It works with Google's Authenticator app system and support most if not all OATH based HOTP/TOTP systems. Accidental removal of...

Memory corruption found using Address Sanitizer — Mozilla

Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free, out of bounds read, and invalid write problems rated as moderate to critical as security issues in shipped software. Some of these issues are...

Low: Red Hat Security Advisory: hypervkvpd security and bug fix update

An updated hypervkvpd package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

AlienVault OSSIM 4.1.2 SQL Injection Vulnerability

AlienVault OSSIM versions 4.1.2 and below suffer from remote SQL injection vulnerabilities. RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2...

Hacker insulted Thai Prime Minister, official website defaced with abusive comments

The official website of the Office of the Thai Prime Minister was quickly taken down after a hacker defaced the website with abusive message pasted next to an altered photograph of a laughing Prime Minister Yingluck Shinawatra. The words "I'm a slutty moron" appeared briefly alongside a picture o...

AlienVault OSSIM 4.1.2 SQL Injection

RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2. Description 3. Affected Products 4. Vulnerabilities 5. Solution 6. Credit 7. Disclosure Timeline 1...

RHEL 5 / 6 : subscription-manager (RHSA-2013:0788)

Updated subscription-manager packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Novell ZENworks Configuration Management 11 SP2 File Upload

File upload vulnerability in Novell ZENworks Configuration Management Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Local file inclusion vulnerability.

PMASA-2013-4 Announcement-ID: PMASA-2013-4 Date: 2013-04-24 Summary Local file inclusion vulnerability. Description In the Export feature, a parameter specifying the export type was not correctly validated, opening the door to a local file inclusion attack. Severity We consider this vulnerability...

Mandriva Linux Security Advisory : clamav (MDVSA-2013:027-1)

ClamAV 0.97.7 addresses several reported potential security bugs. Thanks to Felix Groebert, Mateusz Jurczyk and Gynvael Coldwind of the Google Security Team for finding and reporting these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

MinaliC Webserver 2.0.0 Buffer Overflow

!/usr/bin/env python Title : MinaliC Webserver 2.0.0 Post Method Remote Command Execution Works for Windows Server 2003 sp2 Only Date: 12 Apr 2013 Exploit Author: Antonius - http://www.cr0security.com - http://www.codewall-security.com Thanks : http://www.offensive-security.com ,...