Microsoft Aims to Make Life Harder, More Expensive For Attackers

MIAMI BEACH–It’s been a decade now since Microsoft began focusing on product security as a top priority and there have been a lot of successes and some failures along the way. But in that time, one of the things that most definitely has changed as a result of the Trustworthy Computing program is...

Kayako Support Suite 3.70.02 PHP Code Execution

----------------------------------------------------------------- PT-2011-02 Positive Technologies Security Advisory PHP code Injection in Kayako Support Suite ----------------------------------------------------------------- --- Vulnerable software Kayako Support Suite Version: 3.70.02-stable an...

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5050

An active CVE describes an SQL injection in Elitecore Technologies’ Cyberoam UTM (corporate/Controller) prior to version 10.01.2 build 059. The vulnerability allows remote authenticated administrators to inject arbitrary SQL via the tableid parameter, enabling potential data exposure or modificat...

CVE-2011-5050

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

Cornerstone CMS SQL injection Vulnerability

Exploit for asp platform in category web applications =========================================================================== Title : CMS Cornerstone Sql injection Vulnerability Vendor : http://www.cstech.net.au/ Author : tempemendoan Contact : http://indonesiancoder.com/ Google Dork : "CMS b...

Biz Technologies SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

Biz Technologies SQL Injection

Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.biztechnepal.com Version: All Version Category:: webapps...

CVE-2011-5050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-4050

Buffer overflow in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401...

CVE-2011-4537

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

Buffer overflow

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4050

Buffer overflow in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401...

CVE-2011-4050

The CVE-2011-4050 issue affects 7-Technologies IGSS Data Server (IGSSdataServer.exe) in IGSS 9.x. A buffer overflow in the server, caused by handling of file/packet data, can be triggered remotely by sending a crafted TCP packet to port 12401, leading to a remote denial of service. Public referen...

CVE-2011-4537

Multiple buffer overflows in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port 1 12397 or 2 12399...

CVE-2011-4537

The CVE-2011-4537 entry concerns the 7-Technologies IGSS (Interactive Graphical SCADA System). Affected versions: IGSS 9.0.0.11355 and earlier. Issue: multiple buffer overflows in IGSS allow remote attackers to exploit by sending crafted TCP packets to ports 12397 or 12399, potentially leading to...

CVE-2011-4050: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in 7-Technologies 7T Interactive Graphical SCADA System IGSS 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401...

PT-2011-4829

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11200 Description The issue is related to a buffer overflow that can be triggered by remote attackers sending a crafted packet to TCP port 12401, resulting in a denial of service...

PT-2011-4974

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11355 and earlier Description The issue is related to multiple buffer overflows that can be triggered by remote attackers sending crafted packets to specific TCP ports, potential...