| Real Name | High-Tech Bridge SA |
|---|---|
| Email address | advisory at htbridge.com |
| Website | www.htbridge.com |
| First Active | 2010-04-20 |
| Last Active | 2016-08-03 |
OBM version 2.4.0-rc13 suffers from information disclosure, cross site scripting, local file inclusion, remote SQL injection vulnerabilities.
32cd7c40beed039d478c01f5a79246b2f4906d3da94c27ddf5e45ea5678a6298PHPShop CMS Free version 3.4 suffers from cross site scripting and remote SQL injection vulnerabilities.
8ffe5013bd85e933f7b064840141184420503d7040ec325bd1e48b4133e7824bBrowser CRM version 5.100.01 suffers from cross site scripting and remote SQL injection vulnerabilities.
bae97a2f001f9e5a7e7f686512d05a5386310e22c1fd7651534103e0c0799133HP Device Access Manager for Protect Tools Information Store versions prior to 6.1.0.1 suffer from a heap memory corruption vulnerability.
8c5130001eada0160e3dd77d56ccf4b9801e81f2792039461e1bebc3eb0b5821SugarCRM Community Edition version 6.3.0RC1 suffers from a remote SQL injection vulnerability.
7012c653e5b52a57f78f27b30fba5e47686eaa59c62ade18aa36ab1d69d6c4b5OrangeHRM version 2.6.11 suffers from cross site scripting and remote SQL injection vulnerabilities.
db3bb5ee19f0abfa33fe45c4307d6fdecdafd598a15f7f8f66c33e8ecbcfe2cdDolibarr version 3.1.0 RC suffers from cross site scripting and remote SQL injection vulnerabilities.
aef4bbabd3173ece6416b5ba1cd5f7f6dce42fbb854cd7f08f1b53976a504a56webERP version 4.05 suffers from cross site scripting, information disclosure and remote SQL injection vulnerabilities.
6527863421172bed1320a1beaaf760e10db2399f57d8d1c408408d39b2fe8524VtigerCRM version 5.2.1 suffers from a local file inclusion vulnerability.
003555ea45a9fdbed681bd06acaa02897eb02bb975506e0998fe3151aaf00c4aEfront version 3.6.10 build 11944 suffers from cross site scripting and remote SQL injection vulnerabilities.
3278059d1102def6193bc6a5a50c9ac3e596bb1a775fbbf9d7af34f53340e4dbTine version 2.0 suffers from multiple cross site scripting vulnerabilities.
694f7255e76308ce35b0db450a361b7ae0102347788c3d19b4f0a1d65da87496BugFree version 2.1.3 suffers from multiple cross site scripting vulnerabilities. It suffers from irony as well.
c60ee26015ee452ddc89c1dba200e9cb312be731357aa51904113759519d530cThe Pretty Link WordPress plugin version 1.4.56 suffers from multiple cross site scripting vulnerabilities.
b8a6231299f9909e9f36612f11c7930a47c0083f4a5a518e260c1ae33316f76dMalicious software also known as "Malcode" or "Malware" can compromise the security and functionality of a program. Once "installed" it monitors the user’s habits. This documents introduces this kind of threats by spying a widespread internet browser.
2a6bfafdf205655b130fbe757bf585521958b3e381ba17c01acc6d355d95c869Nowadays, there is a renewed interest in server-side attacks for hackers. According to SANS, attacks against web applications constitute more than 60% of the total attack attempts observed on the Internet. Victims may be the website owners (e.g. intellectual property theft or loss of customer confidence), their clients (e.g. bank transfer fraud or identity theft) as well as any Internet user, since web application vulnerabilities are now widely exploited to convert trusted websites into malicious ones, thus serving client-side exploits contents to Internet users. This document addresses the major threats which face today's companies, from database exfiltration in DMZ to the Advanced Persistent Threats recently undergone in many international organizations.
100985142d65548380351ebd6fcc87cfd85c7f2c807b5e0adb0ae7c04271e115Traq version 2.2 suffers from cross site scripting and remote SQL injection vulnerabilities.
22668c0c2e29e4f3d963fd3af1239678b004998c24ca0e5ea0fa0821bc184a72Help Desk Software version 1.1b suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
7c45c237a4df997457e5bd3ad6b66521ade15991fe7669f4b51a3cc9d807bfeaSiT! Support Incident Tracker version 3.64 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
f96224a116d5b9a0cf199fe7824da18754178ae86a55d1412935c259aa11d26eThis document is the second of a series of five articles relating to the art of hooking. As a test environment they will use an english Windows Seven SP1 operating system distribution.
02012b744a4c170a554406666f1561e871e40b64e03fab4557959d93d6ba3e92Zikula version 1.3.0 suffers from a cross site scripting vulnerability.
7fb8b346fc9c127cfbba1a8de085dbeb812c1e73977b458e5bb1ed8b033d49e8MantisBT version 1.2.7 suffers from cross site scripting and local file inclusion vulnerabilities.
f93ea1f9463f54e352b0762b7f966c8a53d16c2feee1c1340bc0337cc98100a2WordPress Redirection plugin version 2.2.8 suffers from a cross site scripting vulnerability.
214354ab38d00bd33e36679b5e431e91ba439e3d7efe3b68452e36a28851d734StudioLine Photo Basic version 3.70.34.0 suffers from an active-x control insecure method vulnerability.
979702684f53f9be14583275bd1378a36cd6c22a781699f5f71d5f1d8cfa67cfWP-Stats-Dashboard version 2.6.5.1 suffers from a cross site scripting vulnerability.
267125d33a18c0bf9147f49eb589e14b9f0d600aebee93eaf437a0302e071f90Fast Secure version 3.0.3.1 suffers from a cross site scripting vulnerability.
0f445d0f945484d623e0c0246c8d8c544465a619fc2a89e85fe5f499e4557995
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed