ZDI-11-117: McAfee Firewall Reporter GeneralUtilities.pm isValidClient Authentication Bypass Vulnerability
Posted by ZDI Disclosures on Apr 11ZDI-11-117: McAfee Firewall Reporter GeneralUtilities.pm isValidClient Authentication Bypass Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-11-117
April 11, 2011
-- CVSS:
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)
-- Affected Vendors:
McAfee
-- Affected...
[remote] – ManageEngine Applications Manager Authenticated Code Execution
Source: - ManageEngine Applications Manager Authenticated Code Execution
Powered By I-Doo SQL Injection
Sites "Powered By I-Doo" suffer from remote SQL injection vulnerabilities.
Source: Powered By I-Doo SQL Injection
New MacOS Malware, Signed With Legit Apple ID, Found Spying On HTTPS Traffic
Many people believe that they are much less likely to be bothered by malware if they use a Mac computer, but is it really...
www.ads.com.mm XSS
PlanetCreator has discovered a vulnerability in www.ads.com.mm, which could be exploited by malicious people to conduct XSS attacks.
Source: www.ads.com.mm XSS
Lulzsec member blog hacked by TeaMp0isoN
Lulzsec member blog hacked by TeaMp0isoNPersonal Blog http://sven-slootweg.nl/ of one of the Lulzsec Member get defaced by TeaMp0isoN . Get more details about TeaMp0isoN.BREAKING NEWS: TEH...
[Bkis] sNews 1.7.1 XSS vulnerability
Posted by Bkis on May 111. General Information
sNews is a free content management system (CMS) written in PHP and MySQL. It is available at...
DNS Spider Multithreaded Bruteforcer 0.2
DNS Spider is a multithreaded bruteforcer of subdomains that leverages a wordlist and/or character permutation.
Source: DNS Spider Multithreaded Bruteforcer 0.2
Windows AntiBreach Suite
Windows AntiBreach Suite is a fake Antivirus. This rogue displays fake alerts to scare users. It replaces Windows AntiBreach Tool, Windows Paramount Protection, Windows...
[webapps] – FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution
Source: - FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution

