[SECURITY] Fedora 17 Update: xulrunner-16.0.1-1.fc17

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Cisco WebEx .wrf Memory Corruption

Exploit for hardware platform in category local exploits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Cisco WebEx .wrf Memory Corruption Vulnerability 1. Advisory Information Title: Cisco WebEx .wrf Memory Corruption Vulnerabili...

Automated Toolkits Named in Massive DDoS Attacks Against U.S. Banks

Attackers targeting major U.S. banks with distributed denial of service attacks are using a number of toolkits to automate the job. Prolexic Technologies, a security company specializing in DDoS protection services, identified one toolkit called itsoknoproblembro, a kit that attacks multiple port...

APlite Technologies Local File Inclusion

---------------------------------------------------------------- APlite Technologies = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : APlite Technologies = Local File Inclusion Vulnerability Author : Hack Center Security Team...

PT-2015-09: Information Disclosure in Siemens SIMATIC STEP 7 (TIA Portal)

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SIMATIC STEP 7 TIA Portal. Device user passwords in TIA portal project files are stored using a weak hashing algorithm. Attackers with read access to the project file could possibly...

PT-2013-32: Directory Traversal in Siemens Simatic WinCC TIA Portal

The specialists of the Positive Research center have detected "Directory Traversal" vulnerability in Siemens Simatic WinCC TIA Portal. By manipulating the URL an authenticated attacker may have access to source code of the panel’s server-side web application files, which may include user defined...

PT-2013-30: Denial of Service in Siemens Simatic WinCC TIA Portal

The specialists of the Positive Research center have detected "Denial of Service" vulnerability in Siemens Simatic WinCC TIA Portal. By manipulating HTTP requests an authenticated attacker may crash the HMI’s web application. The web application will become unavailable until the device is...

PT-2013-34: Cross-Site Scripting in Siemens Simatic WinCC TIA Portal

The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Siemens Simatic WinCC TIA Portal. If a user clicks on a malicious link which seems to lead to a HMI web application, it is possible to display any data to the user server-side script injection. H...

PT-2013-35: Cross-Site Scripting in Siemens Simatic WinCC TIA Portal

The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Siemens Simatic WinCC TIA Portal. The HMI’s web application is susceptible to reflected Cross-Site-Scripting attacks. If a legitimate user clicks on a malicious link, JavaScript code may get...

PT-2013-31: Cross-Site Scripting in Siemens Simatic WinCC TIA Portal

The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Siemens Simatic WinCC TIA Portal. The HMI’s web application is susceptible to stored Cross-Site-Scripting attacks. An authenticated user may store data on the web application, which will execute...

[SECURITY] Fedora 18 Update: xulrunner-15.0-2.fc18

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Huawei Technologies - 0day Internet Mobile Unicode SEH Based Vulnerability

Exploit for hardware platform in category local exploits !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote,...

Huawei Internet Mobile Overflow

!/usr/bin/perl Title : Huawei Technologies - Internet Mobile 0day Unicode SEH Based Vulnerability . Author : Dark-Puzzle Versions : All Versions Are Vulnerable , The behavior of the program when exploiting may vary from an OS to another OS . Vulnerable By Vendor : Morocco - Meditel 3G & Maroc...

Zend Technologies Zend Framework Zend_XmlRpc Information Disclosure (CVE-2012-3363)

An information disclosure vulnerability has been reported in Zend Technologies Zend Framework...

Fedora Update for xulrunner FEDORA-2012-1800

Check for the Version of xulrunner OpenVAS Vulnerability Test Fedora Update for xulrunner FEDORA-2012-1800 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

MicroOrange CMS SQL Injection

Exploit Title: MicroOrange cms Sql Injection Vulnerability Google Dork: Intext:"Powered by MicroOrange Technologies" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.microorange.net/ Tested on: all ================================== + id parametr in newsdetail.ph...

ANGLER Technologies CMS Cross Site Scripting

? Exploit Title : ANGLER Technologies Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : www.angleritech.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Design -...

Frankenstein Malware turning legitimate software into invisible malware

Many malware and viruses can be identified by detection software because of known bits of malicious code. But what if there was a virus compiled from little bits of programs you already had installed? That's just what two security researchers are looking into. Frankenstein or The Modern Prometheu...

PT-2013-29: Information Disclosure in Siemens Simatic WinCC and PCS 7

The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. By opening a manipulated project file, sensitive data can be transmitted over the network or a DoS condition can be provoked. How to fix Update your software up...

PT-2013-28: Buffer Overflow in Siemens Simatic WinCC and PCS 7

The specialists of the Positive Research center have detected "Buffer Overflow" vulnerability in Siemens Simatic WinCC and PCS 7. An ActiveX control "RegReader", which is installed in the user’s web browser, is susceptible to a buffer overflow. An attacker might trick a victim into visiting a...