Re: ITSEC vendor presentation for dummies
Posted by Atul Agarwal on Apr 08Lol.. nice presentation!
BTW, I could not fail to notice in the vendor logos slide, that you have
included HBGary's...
Windows Troubles Remover
Windows Troubles Remover is a fake security application from the same family as: Windows Troublesmaker Agent, Windows Servant System, Windows Defence Center, Windows Error...
Maia Mailguard 1.0.2a Cross Site Scripting
Maia Mailguard version 1.0.2a suffers from a cross site scripting vulnerability.
Source: Maia Mailguard 1.0.2a Cross Site Scripting
www.york.gov.uk XSS
p0pc0rn has discovered a vulnerability in www.york.gov.uk, which could be exploited by malicious people to conduct XSS attacks.
Source: www.york.gov.uk XSS
[SECURITY] [DSA 2214-1] ikiwiki security update
Posted by Nico Golde on Apr 08-------------------------------------------------------------------------
Debian Security Advisory DSA-2214-1 ...
Windows Diagnostic
Windows Diagnostic is a fake Defragmenter tool (rogue) from the same family as: FakeHDD. This version has the same GUI as: Windows Tool, WinScanTo...
mayors24.boston.gov XSS
p0pc0rn has discovered a vulnerability in mayors24.boston.gov, which could be exploited by malicious people to conduct XSS attacks.
Source: mayors24.boston.gov XSS
Omerportal 3.2 Cross Site Scripting
Omerportal version 3.2 suffers from a cross site scripting vulnerability.
Source: Omerportal 3.2 Cross Site Scripting
Fiberhome HG-110 (adsl/router) vulnerabilities
Posted by Zerial. on Apr 08I found two vulnerabilities on fiberhome hg-110 routers and has not
been reported nor fixed.
XSS:
-
http://192.168.1.1:8000/cgi-bin/webproc?getpage=%3Cscript%3Ealert%28this%29%3C/script%3E&var:menu=advanced&var:page=dns
Local File Include and Directory/Path Traversal:
-
http://192.168.1.1:8000/cgi-bin/webproc?getpage=../../../../../../../../../../../../etc/passwd&var:menu=advanced&var:page=dns
URLs...
Windows Remedy
Windows Remedy is a fake security application from the same family as: Windows Troubles Remover, Windows Troublesmaker Agent, Windows Servant System, Windows Defence Center,...






