Search:Author - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

See also
Daniel Fabian <df_(at)_sec-consult.com>
Daniel Fabian <list_(at)_fabiand.net>
Name: Daniel Fabian
E-mail: research_(at)_sec-consult.com

SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS
SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416
SEC Consult SA-20111219-1 :: Multiple vulnerabilities in WhatsApp
SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969)
SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827
SEC Consult SA-20110701-0 :: Multiple SQL injection vulnerabilities in WordPress
SEC Consult SA-20110407-0 :: Libmodplug ReadS3M Stack Overflow
SEC Consult SA-20101021-0 :: Multiple critical vulnerabilities in Sawmill log analysis software
SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface
SEC Consult SA-20100115-0 :: Local file inclusion/execution and multiple CSRF vulnerabilities in LetoDMS (formerly MyDMS)
SEC Consult SA-20091217-0 :: Authentication bypass and file manipulation in Sitecore Staging Module
SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities
SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console
SEC Consult SA-20090707-0 :: Symbian S60 / Nokia firmware media codecs multiple memory corruption vulnerabilities
Pwning Nokia phones (and other Symbian based smartphones)
SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability
SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability
SEC Consult SA-20090525-2 :: SonicWALL Global Security Client Local Privilege Escalation Vulnerability
SEC Consult SA-20090525-1 :: Nortel Contact Center Manager Server Password Disclosure Vulnerability
SEC Consult SA-20090525-0 :: Nortel Contact Center Manager Server Authentication Bypass Vulnerability
Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000
SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming
SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 Password Disclosure Vulnerability
SEC Consult SA-20090305-1 :: IBM Director CIM Server Remote Denial of Service Vulnerability
SEC Consult SA-20090305-2 :: IBM Director CIM Server Local Privilege Escalation Vulnerability
SEC Consult SA-20090305-0 :: NextApp Echo XML Injection Vulnerability
SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactions remote command injection vulnerability
Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209)
[Full-disclosure] SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability
SEC Consult SA-20071204-0 :: SonicWALL Global VPN Client Format String Vulnerability
SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client
[Full-disclosure] SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability
SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS
SEC Consult SA-20070722-0 :: Remote command execution in Joomla! CMS
SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow
SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express
SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal
SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service
[Full-disclosure] SEC Consult SA-20070226-0 :: File Disclosure in Pagesetter for PostNuke
[Full-disclosure] SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability
[Full-disclosure] SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability
[Full-disclosure] SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure
[Full-disclosure] SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow
SEC Consult SA-20051211-0 :: Nortel SSL VPN Cross Site Scripting/Command Execution
[Full-disclosure] SEC Consult SA-20051202-1 :: GMX Webmail XSS
[Full-disclosure] SEC Consult SA-20050212-1 :: A Word on Webmail Security and Browser related XSS Bugs
SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM
[Full-disclosure] SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption
[Full-disclosure] SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites
SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
[Full-disclosure] SEC-CONSULT SA-20050629-0
[Full-disclosure] Source Code Disclosure in Yaws Webserver <1.56
[Full-disclosure] SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection
[Full-disclosure] SEC-CONSULT SA20050602-1 :: Arbitrary File Inclusion in phpCMS 1.2.x
PHP Input Validation Vulnerabilities
SugarSales Multiple Vulnerabilities

test server