CVE-2011-1653: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Unified Network Control UNC Server in CA Total Defense TD r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the 1 UnAssignFunctionalRoles, 2 UnassignAdminRoles, 3 DeleteFilter, 4 NonAssignedUserList, 5...

CVE-2011-1655: Undefined Security Weakness

The management.asmx module in the Management Web Service in the Unified Network Control UNC Server in CA Total Defense TD r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and...

CVE-2011-1654: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense TD r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

This module exploits a SQL injection flaw in CA Total Defense Suite R12. When supplying a specially crafted soap request to '/UNCWS/Management.asmx', an attacker can abuse the reGenerateReports stored procedure by injecting arbitrary sql statements into the ReportIDs element. Module Options msf u...

CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite Unified Network Control Management Console. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeleteFilter stored procedure,...

CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the management.asmx module of the Management Web Service. This process responds...

CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeleteReports stored procedure, accessed via the management.asmx console. T...

CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UnAssignFunctionalRoles stored procedure, accessed via the management.asmx...

CA Total Defense Suite Heartbeat Web Service Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Endpoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within CA.Itm.Server.ManagementWS.dll. Due to a failure to properly sanitize...

CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DeleteReportLayout stored procedure, accessed via the management.asmx...

CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite r12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RegenerateReport stored procedure, accessed via the management.asmx...

Cmsez(with easy)total Station system injection 0day-vulnerability warning-the black bar safety net

| allinurl:"owered by CMSEZ" comments.php inurlowered by CMSEZ Vulnerability code: mainfile.php ? //comments include "mainfile.php"; $art=new article; //Set $confirm='yes';//yes:need administrator authentication to the display,no:direct display $member=new member; $userinfo=$member-memberauth;...

GOOGLE BOOK the MHTML Protocol injection-XSS vulnerability-vulnerability warning-the black bar safety net

Brief description: GOOGLE BOOK search output gaps, by the MHTML Protocol injection script code to run, resulting in aXSSvulnerabilities. Non-original, forwarded from the white hat group system32 total. Detailed description: Vulnerability to prove: mhtml:http://www. google. com/books?...

Albania Hackers won Voting Poll : Who are the best Hackers ?

Albania Hackers won Voting Poll : Who are the best Hackers ? Hello Friends, We are Happy to inform you guys that, after Open Voting of 30 days on question "Who are the Best Hacker ?" , Finally "Albania Hackers" won by 246 Votes . Total No. of Votes : 694 Thankyou For Visiting "The Hacker News" Cr...

Fedora 12 : freetype-2.3.11-6.fc12 (2010-15785)

Mon Oct 4 2010 Marek Kasik 2.3.11-6 - Add freetype-2.3.11-CVE-2010-2805.patch Fix comparison. - Add freetype-2.3.11-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.3.11-CVE-2010-2808.patch Check the total length of collected POST segments. - Add...

Total Recorder 8.2(build 4100) DLL Hijacking Exploit (iacenc.dll)

Exploit for windows platform in category local exploits =================================================================== Total Recorder 8.2build 4100 DLL Hijacking Exploit iacenc.dll =================================================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Total Video Player 1.31 DLL Hijacking

=================================================== Total Video Player V 1.31 DLL Hijacking Exploit =================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

Total Video Player V 1.31 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Total Video Player V 1.31 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ ...

SnowFox Total Video Converter DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ================================================================ SnowFox Total Video Converter DLL Hijacking Exploit dwmapi.dll ================================================================ / SnowFox Total Video Converter DLL Hijacking...

SnowFox Total Video Converter DLL Hijacking

/ SnowFox Total Video Converter DLL Hijacking Exploit dwmapi.dll Author : anT!-Tr0J4n Greetz : Dev-PoinT.com inj3ct0r.com ,All Dev-poinT members and my friends contact: [email protected] & [email protected] Software Link:www.snowfoxsoft.com/video-converter.html Tested on: Windows XP sp3 how to...