papers

What this paper is This paper describes a Denial of Service (DoS) vulnerability in the IBM OmniFind Crawler. The vulnerability, identified as CVE-2010-3899, arises from the crawler's lack of a recursion depth limit. This

What this paper is This paper details a local privilege escalation vulnerability (CVE-2010-3895) found in IBM OmniFind applications. Specifically, it identifies two executables, and , which are set with the SUID bit and

What this paper is This paper details a remote buffer overflow vulnerability (CVE-2010-3894) in the administration interface of IBM OmniFind. It explains how an attacker can exploit this by providing an excessively long

What this paper is This paper details a Cross-Site Request Forgery (XSRF) vulnerability found in the IBM OmniFind administrator interface. XSRF attacks trick a logged-in user's browser into sending an unintended, malicio

What this paper is This paper describes a Cross-Site Request Forgery (CSRF) vulnerability in osCommerce version 2.2. The vulnerability allows an attacker to change the administrator's password without the administrator's

What this paper is This paper details a Local File Inclusion (LFI) vulnerability found in the component of Joomla!, a popular Content Management System (CMS). The author, CoBRa 21, published this finding in 2010. LFI vul