CVE-2011-2547

The CVE-2011-2547 issue affects Cisco SA 500 Series Security Appliances running software before 2.1.19. The Privilege Escalation vulnerability allows an authenticated user to inject arbitrary commands into the underlying OS via crafted parameters in web forms, enabling execution with root-equival...

Get Your New Video Codecs–and Scareware

Scareware gangs have been using pretty much the same tactics since the dawn of time. Or at least since 2005. They compromise Web sites, use them as jumping off points for pop-up boxes that aim to terrify the citizenry into thinking their PCs are infected and downloading fake security software. Bu...

dotProject GW v2.1.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== dotProject GW v2.1.5 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-24 Vulnerability Laboratory ID VL-ID: ==================================== 83 Product & Service Introduction: =============================== dotProject is a PHP...

Symantec Web Gateway Detection

Symantec Web Gateway was detected on the remote host. This application protects against web-based malware and data loss. The host may be configured as a Central Intelligence Unit, which provides centralized management for multiple gateways. Note: When HTTP credentials are configured, the anti-vir...

Vulnerability in Google Picasa Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google Picasa for Windows version 3.6 build 105.61 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendo...

SEO Poisoning Campaign Infecting Users With Black Hole Exploit Kit

Researchers have found a new black hat SEO campaign that is being used to redirect users to links that will install the Black Hole exploit kit. The attack is based on searches for, of all things, Shia Labeouf, and leads users through a forest of redirects before plopping them on the compromised...

ManageEngine ServiceDesk Plus Detection

The remote web server hosts ManageEngine ServiceDesk Plus, a web-based help desk management application written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55444; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/03/15...

ManageEngine SupportCenter Plus Detection

The remote web server hosts ManageEngine SupportCenter Plus, a web- based customer support application written in Java. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55447; scriptversion"1.10";...

ManageEngine Service Desk Plus 8.0 Directory Traversal Vulnerability

Exploit for jsp platform in category web applications Google Dork: ie: intitle:ManageEngine ServiceDesk Plus" Author: Keith Lee email protected Software Link: http://www.manageengine.com/products/service-desk/91677414/ManageEngineServiceDeskPlus.exe Version: 8.0 Description: Directory traversal...

Vulnerability in Google SketchUp Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google SketchUp version 7.1 Maintenance Release 2 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.1-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

nvisionix Roaming System Remote metasys 0.2 Local File Inclusion

nvisionix Roaming System Remote metasys 0.2 LFI Vulnerability Site ................... : http://sourceforge.net/projects/irsr/ Download ............... : http://space.dl.sourceforge.net/project/irsr/irsr/irsr-0.2/irsr-0.2.ZIP Author ................. : Treasure Priyamal Contact ................ :...

Black Hole Exploit Kit Available for Free

Just a couple of weeks after the source code for the Zeus crimeware kit turned up on the Web, the Black Hole exploit kit now appears to be available for download for free, as well. Black Hole normally sells for $1,500 for an annual license, and is one of the more powerful attack toolkits on the...

Sybase M-Business Anywhere (AvantGo) SOAP Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...

Ultimate PHP Board 2.2.7 - Broken Authentication and Session Management

Ultimate PHP Board 2.2.7 - Broken Authentication and Session Management Exploit Title : Ultimate PHP Board 2.2.7 "Broken Authentication and Session Management" Date : 2011.05.17 Author : i2sec - Gi bum Hong Software Link : http://sourceforge.net/projects/textmb/files/UPB/UPB%202.2.7/ Version :...

Dropbox potential security flaw revealed, could be exploited by hackers !

It seems that information which Dropbox, the popular web-based file-sharing site/service, issued in response to a US Federal Trade Commission complaint, has revealed a potential security flaw that, according to Ray Bryant, CEO of Idappcom, could be exploited by hackers. According to Bryant, after...

Vulnerability in RealNetworks RealPlayer RichFX Component Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting RealNetworks RealPlayer SP version 1.1.4 and earlier, RealPlayer 11.1 and earlier, and RealPlayer Enterprise 2.1.2 and earlier. Microsoft discovered and disclosed the vulnerability...

f-fileman 7.0 Directory Traversal

Advisory: ffileman 7.0 Directory Traversal Vulnerability Credits: Raffaele Forte http://www.backbox.org Tested Versions: ffileman 7.0 Software Link: http://sourceforge.net/projects/f-fileman/ Tested on: Unix Category: Directory Traversal Severity: Medium Description: Directory traversal...

Front Accounting 2.3.4 - Cross-Site Request Forgery

Front Accounting 2.3.4 - Cross-Site Request Forgery Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested...

Symphony CMS 2.1.2 Blind SQL Injection

Exploit for php platform in category web applications Symphony is a web-based content management system CMS that enables users to create and manage websites and web applications of all shapes and sizes?from the simplest of blogs to bustling news sites and feature-packed social networks. Taken fro...