CVE-2011-4053

Untrusted search path vulnerability in 7-Technologies 7T Interactive Graphical SCADA System IGSS before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Microsoft Aims to Make Life Harder, More Expensive For Attackers

MIAMI BEACH–It’s been a decade now since Microsoft began focusing on product security as a top priority and there have been a lot of successes and some failures along the way. But in that time, one of the things that most definitely has changed as a result of the Trustworthy Computing program is...

Kayako Support Suite 3.70.02 PHP Code Execution

----------------------------------------------------------------- PT-2011-02 Positive Technologies Security Advisory PHP code Injection in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stable an...

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5050

An active CVE describes an SQL injection in Elitecore Technologies’ Cyberoam UTM (corporate/Controller) prior to version 10.01.2 build 059. The vulnerability allows remote authenticated administrators to inject arbitrary SQL via the tableid parameter, enabling potential data exposure or modificat...

Biz Technologies SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

Cornerstone CMS SQL injection Vulnerability

Exploit for asp platform in category web applications =========================================================================== Title : CMS Cornerstone Sql injection Vulnerability Vendor : http://www.cstech.net.au/ Author : tempemendoan Contact : http://indonesiancoder.com/ Google Dork : "CMS b...

Biz Technologies SQL Injection

Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.biztechnepal.com Version: All Version Category:: webapps...

CVE-2011-4537

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4050

Buffer overflow in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401...

Buffer overflow

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4050

The CVE-2011-4050 issue affects 7-Technologies IGSS Data Server (IGSSdataServer.exe) in IGSS 9.x. A buffer overflow in the server, caused by handling of file/packet data, can be triggered remotely by sending a crafted TCP packet to port 12401, leading to a remote denial of service. Public referen...

CVE-2011-4537

The CVE-2011-4537 entry concerns the 7-Technologies IGSS (Interactive Graphical SCADA System). Affected versions: IGSS 9.0.0.11355 and earlier. Issue: multiple buffer overflows in IGSS allow remote attackers to exploit by sending crafted TCP packets to ports 12397 or 12399, potentially leading to...

CVE-2011-4050

Buffer overflow in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401...

CVE-2011-4537

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

RedHat Update for tomcat5 RHSA-2011:1845-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2011-48: Multiple Vulnerabilities in AtMail

Specialists from the Positive Technologies Research Center have revealed multiple vulnerabilities in the AtMail webmail interface. 1. Arbitrary Files Loading The system allows one to load files attached to email letters. File extension is not checked; thus, arbitrary files including .php files ca...

[PT-2011-43] Database information disclosure in Kayako Fusion

---------------------------------------------------------------------- PT-2011-43 Positive Technologies Security Advisory Database information disclosure in Kayako Fusion ---------------------------------------------------------------------- --- Vulnerable software Kayako Fusion Link:...