[SECURITY] [DSA 2670-1] request-tracker3.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2670-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2013 http://www.debian.org/security/faq -...

CVE-2010-5167

Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

Seccubus 2.0.alpha1 released, Download Now !

So what is the difference between Seccubus V2 and Seccubus V2 ? Before you try something new you want to know if it is going to be worth it. This article should give you an idea of why we spend quite a lot of time and energy in rebuilding Seccubus V2 from scratch. I clearly recall the conversatio...

Cops hunt for the hacker who tapped Y P Singh's phone in 60 seconds !

News Taken From mumbaimirror.com, The news is as follows... Thane Crime Branch has set up an inquiry into the matter and a team to track down Sachin Loke after reading the Mumbai Mirror exposé A day after Mumbai Mirror exposed how small-time detectives and software professionals offer phone-tappi...

Minnesota Man Faces Prison for Hacking Neighbor's WiFi

Animosity between neighbors has landed a Minnesota man in serious legal trouble. Vincent Ardolf of Blaine, Minn., is facing decades in prison after pleading guilty to hacking his neighbor's WiFi, distributing child pornography, and threatening the Vice President of the United States. Ardolf halte...

Phptroubleticket 'vedi_faq.php' SQL Injection Vulnerability

PHP Trouble Ticket is prone to SQL injection vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1089

SQL injection vulnerability in vedifaq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in vedifaq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1089

SQL injection vulnerability in vedifaq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1089

CVE-2010-1089 is a SQL injection in PHP Trouble Ticket 2.2, affecting vedi_faq.php via the id parameter. The vulnerability allows remote execution of arbitrary SQL commands and has a CVSS v2 base score of 7.5 (HIGH). Supporting references from NVD, Red Hat, OpenVAS and CVE lists confirm the affec...

Trouble Ticket Software ttx.cgi Remote File Download

Exploit for unknown platform in category web applications ==================================================== Trouble Ticket Software ttx.cgi Remote File Download ==================================================== Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Softwar...

Trouble Ticket Software ttx.cgi Remote File Download

No description provided by source. Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob @ http://n01d.com Type:...

Trouble Ticket Software - 'ttx.cgi' Arbitrary File Download

Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob @ http://n01d.com Type: Trouble Ticket Software 0Day...

Trouble Ticket Software - ttx.cgi Arbitrary File Download

Trouble Ticket Software - ttx.cgi Arbitrary File Download Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob...

Trouble Ticket Express fid Parameter Arbitrary Remote Code Execution

The remote host is running Trouble Ticket Express, an open source web-based trouble ticket application written in Perl. At least one module included with the version of Trouble Ticket Express hosted on the remote web server fails to sanitize input to the 'fid' parameter of the 'ttx.cgi' script...

Trouble Ticket Express 3.01 - Remote Code Execution Directory Traversal

Trouble Ticket Express 3.01 - Remote Code Execution Directory Traversal Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal Author: zombiefx Software Link: http://www.troubleticketexpress.com/download/ttx301.zip Version: v3.01,v3.0,v2.24,v2.21 Tested on: Linux CVE :...

Trouble Ticket Express <= 3.01 Remote Code Execution

Exploit for unknown platform in category web applications ======================================================================== Trouble Ticket Express print get $url . '?cmd=file&fn=|' . $ . '|' ; print '$ '; 0day.today 2018-01-03...

Trouble Ticket Express 3.01 - Remote Code Execution / Directory Traversal

Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal Author: zombiefx Software Link: http://www.troubleticketexpress.com/download/ttx301.zip Version: v3.01,v3.0,v2.24,v2.21 Tested on: Linux CVE : Code: This is only possible if an attachment input is available. Directory...

Debian DSA-1944-1 : request-tracker3.4 request-tracker3.6 - session hijack

Mikal Gule discovered that request-tracker, an extensible trouble-ticket tracking system, is prone to an attack, where an attacker with access to the same domain can hijack a user's RT session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2005-1672

Help Center Live (PHP-based live help desk with a MySQL backend) is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2005-1672. The XSS can be triggered by untrusted input in several fields: the find parameter to index.php, the name or message field of a chat requ...