Search:Author - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

Name: RedTeam Pentesting
E-mail: release_(at)_redteam-pentesting.de

[RT-SA-2012-001] Bugzilla: Cross-Site Scripting in Chart Generator
RedTeam Pentesting GmbH
[RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass
[RT-SA-2011-003] Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances
[RT-SA-2011-004] Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface
[RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution
[RT-SA-2011-002] SugarCRM list privilege restriction bypass
[RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTP Digest Authentication
[RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs
[RT-SA-2010-002] Geo++(R) GNCASTER: Insecure handling of NMEA-data
TLS Renegotiation Vulnerability: Proof of Concept Code (Python)
msgid:20091221130346.GA23192@otis.atalante.redteam-pentesting.de?to=bugtraq@securityfocus.com&from=RedTeam%20Pentesting%20GmbH&folder=\\3APA3A\Bugtraq&subject=TLS%20Renegotiation%20Vulnerability:%20Proof
[RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution
[RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component
[RT-SA-2009-001] IceWarp WebMail Server: Cross Site Scripting in Email View
[RT-SA-2009-002] IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader
[RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component
[Full-disclosure] Advisory: SQL-Injections in Mapbender
[Full-disclosure] Advisory: Remote Command Execution in Mapbender
Alcatel-Lucent OmniPCX Remote Command Execution
[Full-disclosure] ActiveWeb Contentserver CMS SQL Injection Management Interface
[Full-disclosure] ActiveWeb Contentserver CMS Editor Permission Settings Problem
[Full-disclosure] ActiveWeb Contentserver CMS Multiple Cross Site Scriptings
[Full-disclosure] ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content
[Full-disclosure] Fujitsu-Siemens ServerView Remote Command Execution
[Full-disclosure] Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure
Advisory: Remote command execution in planetGallery
[Full-disclosure] Advisory: Unauthorized password recovery in phpBannerExchange
[Full-disclosure] Advisory: Authentication bypass in phpBannerExchange
Perlpodder Remote Arbitrary Command Execution
Prodder Remote Arbitrary Command Execution
[Full-disclosure] PAJAX Remote Code Injection and File Inclusion Vulnerability
[Full-disclosure] BSD Securelevels: Circumventing protection of files flagged immutable
[Full-disclosure] Time modification flaw in BSD securelevels on NetBSD and Linux

test server