Real Name | High-Tech Bridge SA |
---|---|
Email address | advisory at htbridge.com |
Website | www.htbridge.com |
First Active | 2010-04-20 |
Last Active | 2016-08-03 |
OBM version 2.4.0-rc13 suffers from information disclosure, cross site scripting, local file inclusion, remote SQL injection vulnerabilities.
32cd7c40beed039d478c01f5a79246b2f4906d3da94c27ddf5e45ea5678a6298
PHPShop CMS Free version 3.4 suffers from cross site scripting and remote SQL injection vulnerabilities.
8ffe5013bd85e933f7b064840141184420503d7040ec325bd1e48b4133e7824b
Browser CRM version 5.100.01 suffers from cross site scripting and remote SQL injection vulnerabilities.
bae97a2f001f9e5a7e7f686512d05a5386310e22c1fd7651534103e0c0799133
HP Device Access Manager for Protect Tools Information Store versions prior to 6.1.0.1 suffer from a heap memory corruption vulnerability.
8c5130001eada0160e3dd77d56ccf4b9801e81f2792039461e1bebc3eb0b5821
SugarCRM Community Edition version 6.3.0RC1 suffers from a remote SQL injection vulnerability.
7012c653e5b52a57f78f27b30fba5e47686eaa59c62ade18aa36ab1d69d6c4b5
OrangeHRM version 2.6.11 suffers from cross site scripting and remote SQL injection vulnerabilities.
db3bb5ee19f0abfa33fe45c4307d6fdecdafd598a15f7f8f66c33e8ecbcfe2cd
Dolibarr version 3.1.0 RC suffers from cross site scripting and remote SQL injection vulnerabilities.
aef4bbabd3173ece6416b5ba1cd5f7f6dce42fbb854cd7f08f1b53976a504a56
webERP version 4.05 suffers from cross site scripting, information disclosure and remote SQL injection vulnerabilities.
6527863421172bed1320a1beaaf760e10db2399f57d8d1c408408d39b2fe8524
VtigerCRM version 5.2.1 suffers from a local file inclusion vulnerability.
003555ea45a9fdbed681bd06acaa02897eb02bb975506e0998fe3151aaf00c4a
Efront version 3.6.10 build 11944 suffers from cross site scripting and remote SQL injection vulnerabilities.
3278059d1102def6193bc6a5a50c9ac3e596bb1a775fbbf9d7af34f53340e4db
Tine version 2.0 suffers from multiple cross site scripting vulnerabilities.
694f7255e76308ce35b0db450a361b7ae0102347788c3d19b4f0a1d65da87496
BugFree version 2.1.3 suffers from multiple cross site scripting vulnerabilities. It suffers from irony as well.
c60ee26015ee452ddc89c1dba200e9cb312be731357aa51904113759519d530c
The Pretty Link WordPress plugin version 1.4.56 suffers from multiple cross site scripting vulnerabilities.
b8a6231299f9909e9f36612f11c7930a47c0083f4a5a518e260c1ae33316f76d
Malicious software also known as "Malcode" or "Malware" can compromise the security and functionality of a program. Once "installed" it monitors the user’s habits. This documents introduces this kind of threats by spying a widespread internet browser.
2a6bfafdf205655b130fbe757bf585521958b3e381ba17c01acc6d355d95c869
Nowadays, there is a renewed interest in server-side attacks for hackers. According to SANS, attacks against web applications constitute more than 60% of the total attack attempts observed on the Internet. Victims may be the website owners (e.g. intellectual property theft or loss of customer confidence), their clients (e.g. bank transfer fraud or identity theft) as well as any Internet user, since web application vulnerabilities are now widely exploited to convert trusted websites into malicious ones, thus serving client-side exploits contents to Internet users. This document addresses the major threats which face today's companies, from database exfiltration in DMZ to the Advanced Persistent Threats recently undergone in many international organizations.
100985142d65548380351ebd6fcc87cfd85c7f2c807b5e0adb0ae7c04271e115
Traq version 2.2 suffers from cross site scripting and remote SQL injection vulnerabilities.
22668c0c2e29e4f3d963fd3af1239678b004998c24ca0e5ea0fa0821bc184a72
Help Desk Software version 1.1b suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
7c45c237a4df997457e5bd3ad6b66521ade15991fe7669f4b51a3cc9d807bfea
SiT! Support Incident Tracker version 3.64 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
f96224a116d5b9a0cf199fe7824da18754178ae86a55d1412935c259aa11d26e
This document is the second of a series of five articles relating to the art of hooking. As a test environment they will use an english Windows Seven SP1 operating system distribution.
02012b744a4c170a554406666f1561e871e40b64e03fab4557959d93d6ba3e92
Zikula version 1.3.0 suffers from a cross site scripting vulnerability.
7fb8b346fc9c127cfbba1a8de085dbeb812c1e73977b458e5bb1ed8b033d49e8
MantisBT version 1.2.7 suffers from cross site scripting and local file inclusion vulnerabilities.
f93ea1f9463f54e352b0762b7f966c8a53d16c2feee1c1340bc0337cc98100a2
WordPress Redirection plugin version 2.2.8 suffers from a cross site scripting vulnerability.
214354ab38d00bd33e36679b5e431e91ba439e3d7efe3b68452e36a28851d734
StudioLine Photo Basic version 3.70.34.0 suffers from an active-x control insecure method vulnerability.
979702684f53f9be14583275bd1378a36cd6c22a781699f5f71d5f1d8cfa67cf
WP-Stats-Dashboard version 2.6.5.1 suffers from a cross site scripting vulnerability.
267125d33a18c0bf9147f49eb589e14b9f0d600aebee93eaf437a0302e071f90
Fast Secure version 3.0.3.1 suffers from a cross site scripting vulnerability.
0f445d0f945484d623e0c0246c8d8c544465a619fc2a89e85fe5f499e4557995