BisonWare BisonFTP Server 3.5 - Remote Buffer Overflow (Metasploit)

BisonWare BisonFTP Server 3.5 - Remote Buffer Overflow Metasploit Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP...

MYRE Real Estate Software Cross Site Scripting / SQL Injection

Title : MYRE Real Estate Software Multiple XSS and SQL Injection Vulnerabilities Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://myrephp.com Advisory : http://secpod.org/blog/?p=346 http://secpod.org/advisories/SECPODMRSSQLXSSVuln.txt Software : MYRE Real Estate Software Da...

BisonFTP 3.5 Buffer Overflow

Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP Server Remote Buffer Overflow Vulnerability', 'Description' = %q Th...

BisonFTP Server Remote Buffer Overflow Exploit (MSF)

Exploit for windows platform in category remote exploits Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP Server...

[PT-2011-19] SQL injection vulnerability in Help Request System

---------------------------------------------------------------------- PT-2011-19 Positive Technologies Security Advisory SQL injection vulnerability in Help Request System ---------------------------------------------------------------------- --- Vulnerable software Help Request System Version...

7-Technologies Data Server Denial of Service

Overview ICS-CERT originally released advisory “ICSA-11-335-01P - 7-Technologies Data Server Denial of Service” in the US-CERT secure portal on December 01, 2011. This web page release was delayed to allow users time to download and install the update. Security researcher UCQ from the Cyber Defen...

Akamai Employee Attempts to Sell Trade Secrets to Israel, Pleads Guilty

A Massachusetts man plead guilty on charges of foreign economic espionage on Tuesday after selling trade secrets from his former employer to an undercover FBI agent posing as an Israeli intelligence officer. According to an Associated Press report, Elliot Doxer, 43, of Brookline, Massachusetts,...

Fedora Update for galeon FEDORA-2011-11084

Check for the Version of galeon OpenVAS Vulnerability Test Fedora Update for galeon FEDORA-2011-11084 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

PT-2011-02: PHP code Injection in Kayako Support Suite

Positive Research Center has discovered PHP code injection vulnerability in Kayako Support Suite. Application insufficiently verifies incoming data received via template editing form. An attacker with administration privileges can inject arbitrary PHP code via template editing feature with an...

PT-2011-03: Information disclosure in Kayako Support Suite

Positive Research Center has discovered an installation path disclosure vulnerability in Kayako Support Suite. Application insufficiently verifies incoming data while handling HTTP GET request to /staff/index.php script. An attacker can get application installation path via the following URL:...

7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)

A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...

WTS Technologies SQL Injection

By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WTS Technologies SQL Injection Vulnerability Vendor : http://www.wtstechnologies.com Author : CR9 Home : Http://Nopotm.ir Archive : http://CR9Exploits.zio.ir Email :...

The Anatomy of the RSA Attack

The attack against RSA earlier this year has become a case study in how data breaches occur and how companies respond. In this video, Uri Rivner, Head of New Technologies, Identity Protection and Verification, at RSA discusses the attack, the aftermath and the lessons learned from it...

7-Technologies Interactive Graphical SCADA System Detection (Windows SMB Login)

SMB login-based detection of the Interactive Graphical SCADA System. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rethinking Black Hat: Building, Rather Than Breaking, Security

No doubt breaking things is fun. I remember back when I was 10 years old when I took apart a squirrel cage fan, flipped some wires and so forth, and then attempted to plug it back in. Good thing my mom stopped me seconds before I was about to get a literal jolt of reality. These days, I still kee...

Avant-Garde Technologies SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Avant-Garde Technologies display-section.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.agtsindia.com/ Persian Gulf 4 Ever! Dork : "Powered by Avant-Garde...

Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials

FYI, we have published a fix for this issue. https://support.ca.com/irj/portal/anonymous/solndtls?aparNo=RO33517&os=W INDOWS&actionID=3 A formal security notice will be published next week. Thanks and regards, Ken Williams, Director CA Technologies Product Vulnerability Response Team CA...

Avant-Garde Technologies (display-section.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Avant-Garde Technologies display-section.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.agtsindia.com/ Persian Gulf 4 Ever! Dork : "Powered by Avant-Garde...

CentOS Update for pidgin CESA-2009:1218 centos3 i386

Check for the Version of pidgin OpenVAS Vulnerability Test CentOS Update for pidgin CESA-2009:1218 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for pidgin CESA-2009:1218 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...