RSA Panel Review – Macs in the Enterprise

Managing IT for a software company has its challenges. For me, the lines between efficiency, security and innovation are difficult to draw at a company like nCircle where engineers require some freedom to perform their best. The panelists at the RSA session “Responding to the ignored threat – Mac...

Sql injection

SQL injection vulnerability in Diocese of Portsmouth Training Courses pdtrainingcourses extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6692

SQL injection vulnerability in Diocese of Portsmouth Training Courses pdtrainingcourses extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-6692

SQL injection vulnerability in TYPO3 extension Diocese of Portsmouth Training Courses (pd_trainingcourses) version 0.1.1, CVE-2008-6692. The issue allows remote attackers to execute arbitrary SQL commands via unknown vectors, impacting the application’s database queries. Public references (NVD, C...

The biggest security vulnerability — people!

We recently conducted a project focused on confidential data security enterprisestrategygroup.com that will be published soon. However, here are some interesting advance results that support this venerable security dictum. ESG asked 308 North American and European security professionals from larg...

Can we learn from Microsoft and Google on security?

Tech security company Fortify and security consulting firm Cigital are getting ready to release a set of best practices that tech companies and other businesses can follow to ensure that the software they develop is secure. The authors developed the model by studying the security practices at...

pilotgroup-sql.txt

--==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

Pilot Group eTraining - news_read.php SQL Injection

Pilot Group eTraining - newsread.php SQL Injection --==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==--...

Pilot Group eTraining - 'news_read.php' SQL Injection

--==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

Unfixed XSS vulnerability at www.myanmartraining.com

Security researcher tweetycoaster, has submitted on 07/01/2008 a cross-site-scripting XSS vulnerability affecting www.myanmartraining.com, which at the time of submission ranked 1488703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01

Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01 While developing one of our advanced security training modules, we identified a remotely exploitable buffer overflow vulnerability in the latest release of InterVetions' HTTP server NaviCopa 2.01. Successful exploitation of this...

Microsoft Step-by-Step Interactive Training Buffer Overflow (MS07-005; CVE-2006-3448)

Step-by-Step Interactive Training is an engine for interactive training titles provided by Microsoft Press and other vendors. By using the Step-by-Step Interactive Training user interface Bookmark link files .CBO,.CBL,.CBM are created. These files allow easier access to a particular topic, and...

Microsoft Step-by-Step Interactive Training contains a buffer overflow

Overview Microsoft Step-by-Step Interactive Training contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code. Description Microsoft Step-by-Step Interactive Training is a training program developed by MIcrosoft. It is...

CVE-2006-3448

Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files cbo, cbl, or .cbm, a different issue than CVE-2005-1212...

CVE-2006-3448

Microsoft Step-by-Step Interactive Training contains a buffer overflow vulnerability (CVE-2006-3448) in the bookmark link handling for .CBO, .CBL, or .CBM files. Exploitation requires a user to open a crafted bookmark file, potentially allowing remote code execution on affected Windows systems (W...

CVE-2006-3448

Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files cbo, cbl, or .cbm, a different issue than CVE-2005-1212...