papers

What this paper is This paper details a SQL Injection vulnerability found in xWeblog version 2.2. The vulnerability allows an attacker to extract sensitive information, specifically usernames and passwords, from the (mem

What this paper is This paper details a vulnerability in Feindura File Manager version 1.0(rc). The vulnerability allows an attacker to upload arbitrary files to the web server. This type of vulnerability is often a step

What this paper is This paper details a vulnerability in the function found in various C standard libraries (libc) across multiple operating systems and software. The function is used to expand filename wildcard patterns

What this paper is This paper describes an exploit module for the Metasploit Framework that targets a vulnerability in the Line Printer Daemon (LPD) service on HP-UX systems. The vulnerability allows an unauthenticated a

What this paper is This paper details a vulnerability in HP Data Protector's Media Operations service. Specifically, it describes a remote denial-of-service (DoS) condition that can be triggered by sending specially craf

What this paper is This paper details a vulnerability in Microsoft ASP.NET that allows an attacker to decrypt sensitive data without knowing the encryption key. This is achieved by exploiting a "padding oracle" weakness.