Specto Local File Inclusion

Exploit Title: Specto Local File Includes Vulnerabilities Google Dork: "hébergement par Specto Technologies Inc" Date: 2012/04/18 Author: H4ckCity Secuirty TeaM Discovered by : Nitrojen90 Site : http://www.h4ckcity.org/forum/ Software Link: http://spectotechnologies.com/ Version : Last Version...

Feegow Technologies CMS injection Vulnerability

Exploit for asp platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|----------------------------/--------------| -/ + Exploit Title : Feegow Technologies CMS MySQLinjection Vulnerability |...

Sihebs Technologies SQL Injection

Exploit Title: Sihebs Technologies SQL Injection Vulnerability Date: 12/03/2012 Author: 3spi0n Software Website: www.sihebs.co.tz Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: changer $ Demo ; www.marineparks.go.tz/parksinfo.php?id=1' MySQLi Dar bi Koridor Benimki, Kendi...

Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities

Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities !-- Title: Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: Zend Server 5.6.0 Zend Optimizer+ 4.1 Zend Code Tracing 1.0 Zen...

Open-Realty 2.5.8 Local File Inclusion

Exploit for php platform in category web applications 1. OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Local File Inclusion. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web...

[SECURITY] Fedora 17 Update: xulrunner-10.0.1-3.fc17

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Netmechanica NetDecision HTTP Server Denial Of Service

No description provided by source. Title : Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=484...

Netmechanica NetDecision HTTP Server - Denial of Service

Netmechanica NetDecision HTTP Server - Denial of Service Title : Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=484...

Netmechanica NetDecision Traffic Grapher Server - Information Disclosure

Netmechanica NetDecision Traffic Grapher Server - Information Disclosure Title : Netmechanica NetDecision Traffic Grapher Server Information Disclosure Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory :...

Netmechanica NetDecision Dashboard Server - Information Disclosure

Netmechanica NetDecision Dashboard Server - Information Disclosure Title : Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=478...

Netmechanica NetDecision Dashboard Server Information Disclosure

Exploit for windows platform in category remote exploits Title : Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=478...

Netmechanica NetDecision HTTP Server - Denial of Service

Title : Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=484 http://secpod.org/advisories/SecPodNetmechanicaNetDecisionHTTPServerDoSVuln.txt...

CVE-2012-0223

Untrusted search path vulnerability in 7-Technologies 7T TERMIS 2.10 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0224...

CVE-2012-0223

CVE-2012-0223 is a DLL hijacking vulnerability in 7-Technologies TERMIS, affecting TERMIS v2.10 and earlier. An attacker could cause local privilege escalation by placing a malicious DLL in the current working directory (Uncontrolled Search Path Element). A patch has been released by 7T (TERMIS_2...

PT-2012-2414

Name of the Vulnerable Software and Affected Versions 7-Technologies 7T TERMIS versions 2.10 and earlier Description The issue is related to an untrusted search path vulnerability, which allows local users to gain privileges. This can be achieved by placing a Trojan horse DLL in the current worki...

CVE-2012-0223: Undefined Security Weakness

Untrusted search path vulnerability in 7-Technologies 7T TERMIS 2.10 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0224...

CVE-2012-0224

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

Design/Logic Flaw

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

CVE-2012-0224

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

CVE-2012-0224

CVE-2012-0224 = Untrusted search path vulnerability in 7-Technologies AQUIS 1.5 and earlier allows local privilege escalation via a Trojan horse DLL in the current working directory. Connected docs confirm related TERMIS DLL-hijacking (CVE-2012-0223) and note a vendor patch exists for TERMIS 2.10...