CVE-2012-0224

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

Design/Logic Flaw

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

CVE-2012-0224

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

CVE-2012-0224

CVE-2012-0224 = Untrusted search path vulnerability in 7-Technologies AQUIS 1.5 and earlier allows local privilege escalation via a Trojan horse DLL in the current working directory. Connected docs confirm related TERMIS DLL-hijacking (CVE-2012-0223) and note a vendor patch exists for TERMIS 2.10...

[SECURITY] Fedora 16 Update: xulrunner-10.0.1-3.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

East Technologies SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

How Offensive Research Drives Down the Cost of Attacks

CANCUN–The offensive security research community has evolved in the last decade or so from a relatively small and insular group inwardly focused, to a large and rather vocal group with a wide variety of motives, opinions and skill levels. But, to hear Brad Arkin of Adobe tell it, the huge amount ...

Sphinix Mobile Web Server U3 3.1.2.47 Cross Site Scripting

Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory : http://secpod.org/blog/?p=453...

NetSarang Xlpd Printer Daemon 4 - Denial of Service

NetSarang Xlpd Printer Daemon 4 - Denial of Service Title : NetSarang Xlpd Printer Daemon Denial of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netsarang.com Advisory : http://secpod.org/blog/?p=457...

Sphinix Mobile Web Server 3.1.2.47 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Sphinix Mobile Web Server 3.1.2.47 - Multiple Persistent Cross-Site Scripting Vulnerabilities Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory :...

Sphinix Mobile Web Server 3.1.2.47 Multiple Persistent XSS Vulnerabilities

Exploit for windows platform in category web applications Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory : http://secpod.org/blog/?p=453...

NetSarang Xlpd Printer Daemon 4 - Denial of Service

Title : NetSarang Xlpd Printer Daemon Denial of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netsarang.com Advisory : http://secpod.org/blog/?p=457 http://secpod.org/advisories/SecPodExploitNetSarangXlpdPrinterDaemonDoSVuln.txt...

Third Security breach at Core Security Technologies

Third Security breach at Core Security Technologies Possible Security Breach in Website of Core Security Technologies by sncope Hacker. This is 3rd time when sncope hack and Leak the Passwords of Core Security Technologies. The details of Pentest done by sncope is available on Pastebin. It includ...

[SECURITY] Fedora 15 Update: xulrunner-9.0.1-1.fc15

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

[PT-2011-01] Cross-Site Scripting in Kayako Support Suite

------------------------------------------------------------------ PT-2011-01 Positive Technologies Security Advisory Cross-Site Scripting in Kayako Support Suite ------------------------------------------------------------------ --- Vulnerable software Kayako Support Suite Version: 3.70.02-stabl...

[PT-2011-04] Cross-Site Scripting in Kayako Support Suite

----------------------------------------------------------------- PT-2011-04 Positive Technologies Security Advisory Cross-Site Scripting in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stable...

[PT-2011-02] PHP code Injection in Kayako Support Suite

----------------------------------------------------------------- PT-2011-02 Positive Technologies Security Advisory PHP code Injection in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stable an...

[PT-2011-03] Information disclosure in Kayako Support Suite

----------------------------------------------------------------- PT-2011-03 Positive Technologies Security Advisory Information disclosure in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stabl...

7-Technologies IGSS 9 IGSSdataServer.exe DoS

The 7-Technologies SCADA IGSS Data Server IGSSdataServer.exe '7-Technologies IGSS 9 IGSSdataServer.exe DoS', 'Description' = %q The 7-Technologies SCADA IGSS Data Server IGSSdataServer.exe 'jfa', Metasploit module , 'License' = MSFLICENSE, 'References' = 'CVE', '2011-4050' , 'OSVDB', '77976' ,...

CVE-2011-4053

The CVE-2011-4053 issue affects 7-Technologies IGSS (Interactive Graphical SCADA System). It describes an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse DLL in the current working directory, before IGSS patch version 9.0.0.11291. Public so...