Поиск:Автор - компьютерная безопасность: уязвимости и эксплоиты

[RU] switch to
English Version

Имя: Alexandr Polyakov
E-mail: alexandr.polyakov_(at)_dsec.ru

[DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability
[DSECRG-11-041] SAP NetWeaver - Authentication bypass (Verb Tampering)
[DSECRG-11-040] SAP NetWeaver SPML - XML CSRF user creation
[DSECRG-11-039] SAP NetWeaver TH_GREP module - Code injection vulnerability (NEW)
[DSECRG-11-036] SAP NetWaver Virus Scan Interface - multiple XSS
[DSECRG-11-034] SAP NetWeaver J2EE MeSync – information disclose
[DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose
[DSECRG-11-030] SAP NetWeaver JavaMailExamples - XSS
[DSECRG-11-031] SAP RFC EPS_DELETE_FILE - Authorisation bypass, smbrelay
[DSECRG-11-037] SAP BW Doc - Multiple XSS
[DSECRG-11-038] SAP RSTXSCRP report - smb relay vulnerability
[DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose (by ERPScan)
[DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability (by ERPScan)
[DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay
[DSECRG-11-014] SAP GUI (sapgui) - DLL hijacking
[DSECRG-11-011] SAP Crystal Reports 2008 - Multiple XSS
[DSECRG-11-012] SAP NetWeaver Integration Directory - multiple XSS
[DSECRG-11-013] SAP NetWeaver Runtime - multiple XSS
[DSECRG-11-009] SAP NetWaver XI SOAP Adapter - XSS
[DSECRG-11-010] SAP NetWeaver logon.html - XSS
[DSECRG-00142] SAP Crystal Reports 2008 - actionNavjsp_xss
[DSECRG-11-008] Open Edge RDBMS - Multiple architecture vulnerabilities (UNPATCHED)
[DSECRG-00145] SAP Crystal Reports 2008 - Directory Traversal
[DSECRG-11-007] Oracle Document Capture ImportBodyText - read files
[DSECRG-11-006] Oracle Document Capture ActiveX - Insecure method, buffer overflow
[DSECRG-00143] SAP Crystal Reports 2008 - ActiveX insecure methods
[DSECRG-11-005] Oracle Document Capture empop3.dll - insecure method
[DSECRG-00153] Oracle Document Capture Actbar2.ocx - insecure method
[DSECRG-09-040] SAP Netweaver wsnavigator XSS Security Vulnerability
[DSECRG-09-068] SAP NetWaver SLD - multiple XSS
[DSecRG-09-053] VMware Remoute Console - format string
[DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability
[DSECRG-09-064] SAP GUI - Insecure method, code execution
[DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow.
[DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method
[DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS
[DSECRG-09-043] SAP GUI 7.1 Insecure Method
(edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods
[DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability
[DSECRG-09-015] SAP GUI 6.4 Buffer Overflow vulnerability
[DSECRG-09-016] SAP SAPDB Multiple XSS
Digital Security Research Group [DSecRG] Advisory #DSECRG-09-003
Digital Security Research Group [DSecRG] Advisory #DSECRG-09-001
Digital Security Research Group [DSecRG] Advisory #DSECRG-09-002
[DSECRG-08-028] File read in Velocity web-server
[DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability

test server