CVE-2011-2757

Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the FILENAME parameter. NOTE: this might overlap the US-CERT VU543310 issue...

Directory traversal

Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the FILENAME parameter. NOTE: this might overlap the US-CERT VU543310 issue...

CVE-2011-2757

CVE-2011-2757 affects ManageEngine ServiceDesk Plus

Lady Gaga website hacked and fans details stolen by Hackers

Lady Gaga website hacked and fans details stolen by Hackers Lady Gaga has called in police after thousands of her fans personal details were stolen from her website. Her record label Univeral acted after the site was hacked into by US cyber attackers SwagSec. A source said: "She's upset and hopes...

Oracle Releases Critical Patch Update for July 2011

Oracle has released its Critical Patch Update for July 2011 to address 78 vulnerabilities across multiple products. This update contains the following security fixes: 13 for Oracle Database Server 3 for Oracle Secure Backup 7 for Oracle Fusion Middleware 18 for Oracle Enterprise Manager 1 for...

RIM Releases Security Advisory for BlackBerry Enterprise Server

RIM has released a security advisory to address a vulnerability in the BlackBerry Administration API included in the BlackBerry Enterprise Server. The vulnerability may allow an attacker with user permissions granted to the BlackBerry Administration API to disclose sensitive information or cause ...

PG eLMS Pro DEC_2007_01 Cross Site Scripting

PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities function xss1document.forms"xss".submit; form ac...

Mozilla Releases Firefox 5.0.1

The Mozilla Foundation has released Firefox 5.0.1 to address an issue with Mac OS X 10.7 and Java for Mac OS X 10.6 Update 5. These issues could cause Firefox to crash. US-CERT encourages users and administrators to review the Mozilla Foundation Firefox 5.0.1 Release Notes and apply any necessary...

Security Metrics Go Prime Time at Metricon 6

The metrics movement that has been slowly but surely infiltrating the security community in the last few years has had its own annual gathering–Metricon–for some time now. It’s been a small, quasi-academic conference since its inception, but now Metricon’s organizers are branching out a bit,...

Microsoft Releases July Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows and Microsoft Office as part of the Microsoft Security Bulletin Summary for July 2011. These vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CERT encourages users...

DmxReady Contact Us Manager 1.2 - SQL Injection

DmxReady Contact Us Manager 1.2 - SQL Injection Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inccontactusmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=contact-us-manager Version: v1.2 Language: ASP...

DmxReady Contact Us Manager 1.2 SQL Injection

Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inccontactusmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=contact-us-manager Version: v1.2 Language: ASP Price : $99.97 Tested on: Windows XP Sp3 Greetz :...

DmxReady Contact Us Manager 1.2 - SQL Injection

Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inccontactusmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=contact-us-manager Version: v1.2 Language: ASP Price : $99.97 Tested on: Windows XP Sp3 Greetz :...

DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inccontactusmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=contact-us-manager Version: v1.2 Language:...

Official Website of Amy Winehouse - Songer/Songwriter Defaced

Official Website of Amy Winehouse - Songer/Songwriter Defaced Amy Jade Winehouse official website https://www.amywinehouse.com/ defaced by Anonymous hackers for Antisec . Amy Jade Winehouse born 14 September 1983 is an English singer-songwriter, known for her powerful contralto vocals and her...

Meggit - US Military and Law Enforcement equipment supplier hacked for #Antisec

Meggit Database Hacked - US Military and Law Enforcement equipment supplier for Antisec Database of www.meggitttrainingsystems.com a US Military and Law Enforcement equipment supplier has been hacked and exposed by Anonymous The Bash Crew . Hackers said "People of the USA your government puts the...

Meggit - US Military and Law Enforcement equipment supplier hacked for #Antisec

Meggit Database Hacked - US Military and Law Enforcement equipment supplier for Antisec Database of www.meggitttrainingsystems.com a US Military and Law Enforcement equipment supplier has been hacked and exposed by Anonymous The Bash Crew . Hackers said "People of the USA your government puts the...

Moonlight Maze

Starting in 1998, U.S. government officials began noticing a pattern of probes into various government networks, including the Pentagon, NASA, universities, research institutions and the Department of Energy. Evidently, hackers – believed to be located in Russia – had compromised these networks a...

Gary McKinnon

For more than a year between February of 2001 and March of 2002, a British national, Gary McKinnon, was allegedly able to hack into nearly 100 United States military and NASA computers. Prosecutors have accused McKinnon of having committed the “biggest military computer hack of all time.” McKinno...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...