[PT-2011-21] SQL injection vulnerability in OneOrZero AIMS

---------------------------------------------------------------------- PT-2011-21 Positive Technologies Security Advisory SQL injection vulnerability in OneOrZero AIMS ---------------------------------------------------------------------- ---Vulnerable software OneOrZero AIMS Version: 2.7.0 and...

inCommand Technologies, Inc. Cross-site Scripting Vulnerability

------------In The Name Of God------------ inCommand Technologies, Inc. Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Website Design by inCommand Technologies, Inc." xss EXPLOIT:...

inCommand Technologies Cross Site Scripting

------------In The Name Of God------------ inCommand Technologies, Inc. Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Website Design by inCommand Technologies, Inc." xss EXPLOIT: alert/0/...

CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106...

GateOne Beta - Terminal emulator for HTML5 web browsers

GateOne Beta - Terminal emulator for HTML5 web browsers The software makes use of WebSockets to connect a server backend written in Python and a frontend written for modern browsers in JavaScript, HTML5 and CSS. The frontend doesn't require any browser plug-ins to be installed.Gate One also...

Microsoft Publisher 2007 Pubconv.dll Memory Corruption

Core Security Technologies - Corelabs Advisory Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106 Advisory URL:...

DDIVRT-2011-34 Metropolis Technologies OfficeWatch Directory Traversal

Title ----- DDIVRT-2011-34 Metropolis Technologies OfficeWatch Directory Traversal Severity -------- High Date Discovered --------------- August 15, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Chris Graham and r@b13$ Vulnerability Description...

Fedora Update for galeon FEDORA-2011-13467

Check for the Version of galeon OpenVAS Vulnerability Test Fedora Update for galeon FEDORA-2011-13467 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Metropolis Technologies OfficeWatch directory traversal

Embedded web server directory traversal...

[SECURITY] Fedora 14 Update: galeon-2.0.7-44.fc14.1

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

Interview: Crypto Legend Ron Rivest On Fixing SSL, APTs and The Future Of Security

One of the biggest talks at this year’s Black Hat Briefings was a presentation on the structural problem with digital certificate authorities by Moxie Marlinspike. The subsequent hack of Dutch certificate authority DigiNotar and a damning report on that attack only weeks later, and more recent...

Aspire Technologies SQL Injection

================================================ Exploit Title : Aspire Technologies SQL Injection Vulnerability Google Dork : intext:"Powered by Aspire Technologies" Date : 2011-25-09 Author : nGa Sa Lu GaNgst3r Service Link : http://www.aspiresolutions.info Tested on : Vista Platform : php +...

Core Security Technologies victim of latest Hack

Core Security Technologies victim of latest Hack Core Security Technologies itself become the latest victim of hack by sncope hacker. Hacker deface the websites, Mirror of hack can be seen here. Core Security offers the first and only real-world approach to security testing and measurement, but...

Core Security Technologies victim of latest Hack

Core Security Technologies victim of latest Hack Core Security Technologies itself become the latest victim of hack by sncope hacker. Hacker deface the websites, Mirror of hack can be seen here. Core Security offers the first and only real-world approach to security testing and measurement, but...

Core Security Technologies Advisory 2011.0506

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

Microsoft SharePoint CVE-2011-1893 Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

[SECURITY] Fedora 16 Update: xulrunner-6.0.2-1.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

BisonWare BisonFTP Server 3.5 - Remote Buffer Overflow (Metasploit)

Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP Server Remote Buffer Overflow Vulnerability', 'Description' = %q Th...

MYRE Real Estate Software - Multiple Vulnerabilities

MYRE Real Estate Software - Multiple Vulnerabilities Title : MYRE Real Estate Software Multiple XSS and SQL Injection Vulnerabilities Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://myrephp.com Advisory : http://secpod.org/blog/?p=346...

PT-2011-29: Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300

Positive Research Center has discovered a vulnerability that allows one to obtain content of arbitrary files and execute arbitrary code. How to fix Update your software up to the latest version Update link Advisory status 09.09.2011 - Vendor is notified 09.09.2011 - Vendor gets vulnerability...