CVE-2012-0224: Undefined Security Weakness

Untrusted search path vulnerability in 7-Technologies 7T AQUIS 1.5 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0223...

PT-2012-2415

Name of the Vulnerable Software and Affected Versions 7-Technologies 7T AQUIS versions 1.5 and earlier Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. Recommendations For versions 1.5 and earlier, consider restricting access to...

[SECURITY] Fedora 16 Update: xulrunner-10.0.1-3.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

East Technologies SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

How Offensive Research Drives Down the Cost of Attacks

CANCUN–The offensive security research community has evolved in the last decade or so from a relatively small and insular group inwardly focused, to a large and rather vocal group with a wide variety of motives, opinions and skill levels. But, to hear Brad Arkin of Adobe tell it, the huge amount ...

Sphinix Mobile Web Server U3 3.1.2.47 Cross Site Scripting

Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory : http://secpod.org/blog/?p=453...

NetSarang Xlpd Printer Daemon 4 - Denial of Service

NetSarang Xlpd Printer Daemon 4 - Denial of Service Title : NetSarang Xlpd Printer Daemon Denial of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netsarang.com Advisory : http://secpod.org/blog/?p=457...

Sphinix Mobile Web Server 3.1.2.47 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Sphinix Mobile Web Server 3.1.2.47 - Multiple Persistent Cross-Site Scripting Vulnerabilities Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory :...

Sphinix Mobile Web Server 3.1.2.47 Multiple Persistent XSS Vulnerabilities

Exploit for windows platform in category web applications Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory : http://secpod.org/blog/?p=453...

NetSarang Xlpd Printer Daemon 4 - Denial of Service

Title : NetSarang Xlpd Printer Daemon Denial of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netsarang.com Advisory : http://secpod.org/blog/?p=457 http://secpod.org/advisories/SecPodExploitNetSarangXlpdPrinterDaemonDoSVuln.txt...

Third Security breach at Core Security Technologies

Third Security breach at Core Security Technologies Possible Security Breach in Website of Core Security Technologies by sncope Hacker. This is 3rd time when sncope hack and Leak the Passwords of Core Security Technologies. The details of Pentest done by sncope is available on Pastebin. It includ...

[SECURITY] Fedora 15 Update: xulrunner-9.0.1-1.fc15

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

[PT-2011-04] Cross-Site Scripting in Kayako Support Suite

----------------------------------------------------------------- PT-2011-04 Positive Technologies Security Advisory Cross-Site Scripting in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stable...

[PT-2011-02] PHP code Injection in Kayako Support Suite

----------------------------------------------------------------- PT-2011-02 Positive Technologies Security Advisory PHP code Injection in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stable an...

[PT-2011-03] Information disclosure in Kayako Support Suite

----------------------------------------------------------------- PT-2011-03 Positive Technologies Security Advisory Information disclosure in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stabl...

[PT-2011-01] Cross-Site Scripting in Kayako Support Suite

------------------------------------------------------------------ PT-2011-01 Positive Technologies Security Advisory Cross-Site Scripting in Kayako Support Suite ------------------------------------------------------------------ --- Vulnerable software Kayako Support Suite Version: 3.70.02-stabl...

CVE-2011-4053

Untrusted search path vulnerability in 7-Technologies 7T Interactive Graphical SCADA System IGSS before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2011-4053

The CVE-2011-4053 issue affects 7-Technologies IGSS (Interactive Graphical SCADA System). It describes an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse DLL in the current working directory, before IGSS patch version 9.0.0.11291. Public so...

PT-2012-1796

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions prior to 9.0.0.11291 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory due to an untrusted search path vulnerability...

CVE-2011-4053: Undefined Security Weakness

Untrusted search path vulnerability in 7-Technologies 7T Interactive Graphical SCADA System IGSS before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory...