seeing is believing
Showing 1 - 25 of 37 RSS Feed

Files Date: 2012-09-20 to 2012-09-21

Red Hat Security Advisory 2012-1301-01
Posted Sep 20, 2012
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-1301-01 - JBoss Enterprise Data Services Platform extends JBoss Enterprise SOA Platform to provide services for data virtualization, federation, and integration. This roll up patch serves as a cumulative upgrade for JBoss Enterprise Data Services Platform 5.3.0. It includes various bug fixes. The following security issue is also fixed with this release: It was found that the Teiid JDBC socket did not encrypt client log in messages by default. A man-in-the-middle attacker could use this flaw to obtain log in credentials and other JDBC traffic.

tags | advisory
systems | linux, redhat
advisories | CVE-2012-3431
MD5 | 5dd870baa184f115de899028fb6ec2a0
Ubuntu Security Notice USN-1576-1
Posted Sep 20, 2012
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1576-1 - Sebastian Krahmer discovered that DBus incorrectly handled environment variables when running with elevated privileges. A local attacker could possibly exploit this flaw with a setuid binary and gain root privileges.

tags | advisory, local, root
systems | linux, ubuntu
advisories | CVE-2012-3524
MD5 | cb86b09af16c3fba0f63cfb9e4776837
Apache CXF SOAP Action Spoofing Attacks
Posted Sep 20, 2012
Authored by Colm O hEigeartaigh | Site cxf.apache.org

Apache CXF is vulnerable to SOAP Action spoofing attacks on Document Literal web services.

tags | advisory, web, spoof
advisories | CVE-2012-3451
MD5 | 8b4f9d357259473c95e4ce65ade826f4
AShop 5.3.4 Cross Site Scripting
Posted Sep 20, 2012
Authored by HTTPCS

AShop version 5.3.4 suffers from a cross site scripting vulnerability.

tags | exploit, xss
MD5 | 5fb9a9edfb35052380bd77b8d6215539
Tariq Rauf SQL Injection
Posted Sep 20, 2012
Authored by Net.W0lf, Hack Center Security Team

Sites designed by Tariq Rauf suffer from a remote SQL injection vulnerability. Note that this finding houses site-specific data.

tags | exploit, remote, sql injection
MD5 | 6a2d04e1dd4863c501e1e8cff174500d
NW7Design SQL Injection
Posted Sep 20, 2012
Authored by Net.W0lf, Hack Center Security Team

Sites designed by NW7Design suffer from a remote SQL injection vulnerability. Note that this finding houses site-specific data.

tags | exploit, remote, sql injection
MD5 | 191299ad4d6d57569f13533211e00207
Jessica Rhaye Design Cross Site Scripting
Posted Sep 20, 2012
Authored by Net.W0lf, Hack Center Security Team

Sites designed by Jessica Rhaye Design suffer from a cross site scripting vulnerability. Note that this finding houses site-specific data.

tags | exploit, xss
MD5 | 97051a474b8d074c84ddb99767779cf1
Rocket Web Consulting SQL Injection
Posted Sep 20, 2012
Authored by Net.W0lf, Hack Center Security Team

Sites created by Rocket Web Consulting suffer from a remote SQL injection vulnerability. Note that this finding houses site-specific data.

tags | exploit, remote, web, sql injection
MD5 | aba33201a3465cd1e23608fe98b235f0
Manhali 1.8 Local File Inclusion
Posted Sep 20, 2012
Authored by L0n3ly-H34rT

Manhali version 1.8 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion
MD5 | bda26c1892ad3e41ee3fe469d347da23
Olojin SQL Injection
Posted Sep 20, 2012
Authored by Net.W0lf

Sites created by Olojin appear to suffer from a remote SQL injection vulnerability. Note that this finding houses site-specific data.

tags | exploit, remote, sql injection
MD5 | 52b1c9bc9a44cef10688478078d3cbc0
Secunia Security Advisory 50664
Posted Sep 20, 2012
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in Apache CXF, which can be exploited by malicious people to bypass certain security restrictions.

tags | advisory
MD5 | 252ec31709211b8eff78087087855304
Secunia Security Advisory 50672
Posted Sep 20, 2012
Authored by Secunia | Site secunia.com

Secunia Security Advisory - A vulnerability has been reported in the PRH Search module for Drupal, which can be exploited by malicious people to conduct script insertion attacks.

tags | advisory
MD5 | cc7a202f7f9071282190ecc386454778
cgCraft LLC SQL Injection
Posted Sep 20, 2012
Authored by Net.W0lf, Hack Center Security Team

Sites designed by cgCraft LLC suffers from multiple remote SQL injection vulnerabilities. Note that this finding houses site-specific data.

tags | exploit, remote, vulnerability, sql injection
MD5 | 1fdee860d763548634899ff147d98175
Cisco Security Advisory 20120620-ac-2
Posted Sep 20, 2012
Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - The Cisco AnyConnect Secure Mobility Client is affected by multiple vulnerabilities including code execution. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available. Revision 2.0 of this advisory corrects an inadvertent omission in the original advisory, which failed to list that the fixes also address a vulnerability in Cisco Secure Desktop, described by CVE-2012-4655.

tags | advisory, vulnerability, code execution
systems | cisco
advisories | CVE-2012-4655
MD5 | 9e328cb53e5717f483862a1e9750b8ff
Microcart 1.0 Cross Site Scripting
Posted Sep 20, 2012
Authored by Joseph Sheridan, Chris Cooper | Site reactionpenetrationtesting.co.uk

The administrative directory of Microcart version 1.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2012-4241
MD5 | 50ea13302ced90d4959e0bf7d54843b0
Drupal FileField Sources 6.x / 7.x Cross Site Scripting
Posted Sep 20, 2012
Site drupal.org

Drupal FileField Sources third party module versions 6.x and 7.x suffer from a cross site scripting vulnerability.

tags | advisory, xss
MD5 | 5dfd616ce6f309203bedc1288f92fff6
Thomson Wireless VoIP Cable Modem Authentication Bypass
Posted Sep 20, 2012
Authored by Glafkos Charalambous, George Nicolaou

This exploit leverages authentication bypass vulnerabilities in the Thomson wireless VoIP cable modem. It affects the TWG850-4 model.

tags | exploit, vulnerability, bypass
MD5 | f9e5802065dba5e524aacc6f3ab12c10
Drupal Simplenews Scheduler 6.x PHP Code Execution
Posted Sep 20, 2012
Authored by Sascha Grossenbacher, Joachim Noreiko | Site drupal.org

Drupal Simplenews Scheduler third party module version 6.x suffers from an arbitrary PHP code execution vulnerability.

tags | advisory, arbitrary, php, code execution
MD5 | c575d7d0e28b42f2ab59a423481edc40
ClubHACK Magazine Issue 32
Posted Sep 20, 2012
Authored by clubhack | Site chmag.in

ClubHACK Magazine Issue 32 - Topics covered include The Compliance Storm on the Horizon, Digital Signature in Mom's Guide, Cracking WPA/WPA2, and more.

tags | magazine
MD5 | 4cd56c88c870ec02935d766b51628e04
WordPress Wp-TopBar 4.02 CSRF / XSS
Posted Sep 20, 2012
Authored by Blake Entrekin

WordPress Wp-TopBar plugin version 4.02 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf
MD5 | 8711d5fee1ad2a15d09e443d1c9ccf98
Drupal Imagemenu 6.x Cross Site Scripting
Posted Sep 20, 2012
Authored by David Houlder | Site drupal.org

Drupal Imagemenu third party module version 6.x suffers from a cross site scripting vulnerability.

tags | advisory, xss
MD5 | 0daa4a926ea3f514b4536ba15840e06a
Microcart 1.0 Checkout Cross Site Scripting
Posted Sep 20, 2012
Authored by Joseph Sheridan, Chris Cooper | Site reactionpenetrationtesting.co.uk

Microcart version 1.0 Checkout suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
advisories | CVE-2012-4241
MD5 | 148e5a7af66b955b6628ca08a2f63db4
WordPress MF Gig Calendar 0.9.2 Cross Site Scripting
Posted Sep 20, 2012
Authored by Joseph Sheridan, Chris Cooper | Site reactionpenetrationtesting.co.uk

WordPress MF Gig Calendar plugin version 0.9.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2012-4242
MD5 | c5758507555dea12ca344ff7c343c14d
Palestinian Wordlist
Posted Sep 20, 2012

This was submitted anonymously as a Palestine wordlist for cracking purposes. It has proper names of middle eastern figures, cities, and more.

tags | cracker
MD5 | 4009c342a642d5ce77e4721152b66e08
Joomla 2.5.6 Cross Site Scripting
Posted Sep 20, 2012
Authored by Stefan Schurtz

Joomla version 2.5.6 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss
MD5 | 6777c9048e3a3f3d4f17cfc9ef2e8606
Page 1 of 2
Back12Next

File Archive:

October 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    15 Files
  • 2
    Oct 2nd
    16 Files
  • 3
    Oct 3rd
    15 Files
  • 4
    Oct 4th
    15 Files
  • 5
    Oct 5th
    11 Files
  • 6
    Oct 6th
    6 Files
  • 7
    Oct 7th
    2 Files
  • 8
    Oct 8th
    1 Files
  • 9
    Oct 9th
    13 Files
  • 10
    Oct 10th
    16 Files
  • 11
    Oct 11th
    15 Files
  • 12
    Oct 12th
    23 Files
  • 13
    Oct 13th
    13 Files
  • 14
    Oct 14th
    12 Files
  • 15
    Oct 15th
    2 Files
  • 16
    Oct 16th
    16 Files
  • 17
    Oct 17th
    16 Files
  • 18
    Oct 18th
    14 Files
  • 19
    Oct 19th
    8 Files
  • 20
    Oct 20th
    7 Files
  • 21
    Oct 21st
    0 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close