Visualizzazione post con etichetta IBM X-Force. Mostra tutti i post
Visualizzazione post con etichetta IBM X-Force. Mostra tutti i post

IBM X-Force - RazorCMS CSRF

Posted on domenica 18 marzo 2012 by Ivano Binetti

IBM X-Force has published a new Advisory regarding my Razorcms vulnerability:
IBM X-Force RazorCMS Advisory

To read my Original Advisory:
Ivano Binetti's RazorCMS Original Advisory 


IBM X-Force - Drupal 7.12 CSRF

Posted on domenica 11 marzo 2012 by Ivano Binetti

IBM X-Force has published a security Advisory related to Drupal 7.12 CSRF vulnerability which I've discovered in the past days.
IBM X-Force's Drupal 7.12 Advisory

To read more about my Original Advisory:
My Original Drupal 7.12 Advisory

IBM X-Force - Webfolio <= 1.1.4 Multiple XSS

Posted on venerdì 9 marzo 2012 by Ivano Binetti

IBM X-Force published an Advisory related to Webfolio <= 1.1.4 Multiple XSS that I've discovered in the past days.
For read IBM X-Force Advisory:
http://xforce.iss.net/xforce/xfdb/73738

For more details about my Original Advisory:
http://ivanobinetti.blogspot.com/2012/03/webfolio-114-multiple-xss.html

IBM X-Force - DFLabs PTK <= 1.0.5 Multiple Vulnerabilities

Posted on giovedì 1 marzo 2012 by Ivano Binetti

Today IBM X-Force published my Advisory regarding multiple vulnerabilities which I've found in DFLabs PTK  <= 1.0.5  which allow an attacker to steal administrator/investigator credentials.
For read IBM X-Force Advisory:
http://xforce.iss.net/xforce/xfdb/73404

For read my Original Advisory:
http://ivanobinetti.blogspot.com/2012/02/dflabs-ptk-105-multiple-vulnerabilities.html

IBM X-Force published my SyndeoCMS Advisory

Posted on lunedì 27 febbraio 2012 by Ivano Binetti

Yesterday IBM X-Force published my Advisory regarding a new CSRF vulneability that I've found in SyndeoCMS <= 3.0 http://ivanobinetti.blogspot.com/2012/02/syndeocms-30-csrf-vulnerability.html
This vulnerability allows an attacker to change administrator password and gain access to the system.

IBM classified this vulnerability as "Highly Exploitable".

For more details about IBM X-Force publication:
http://xforce.iss.net/xforce/xfdb/73319

IBM X-Force published my PlumeCMS Advisory

Posted on domenica 26 febbraio 2012 by Ivano Binetti

Few days ago I discovered a new CSRF vulnerability (http://ivanobinetti.blogspot.com/2012/02/plumecms-124-csrf-0day-vulnerability.html which affects all versions - included latest (1.2.4) - of Pluse CMS.
Today IBM X-Force published my Advisory and classified the "Exploitability:" of this vulnerability as "High".
Fore more details:
http://xforce.iss.net/xforce/xfdb/73317

IBM X-Force published my D-Link DSL-2640B Advisories

Posted on by Ivano Binetti

Today IBM X-Force published two of my advisories related to vulnerabilities discoverd into D-Link DSL-2640B ADSL Router / Access Point.
If you would like to read more about them:
http://xforce.iss.net/xforce/xfdb/73316
http://xforce.iss.net/xforce/xfdb/73379

IBM X-Force published my Cisco Linksys WAG54GS Advisory

Posted on by Ivano Binetti

Today IBM X-Force has published my Advisory related to a security flaw which I've discovered in Cisco Linksys WAG54GS router which allow an attacker to change administrator password.

For more informations:
http://xforce.iss.net/xforce/xfdb/73345

IBM X-Force published ForkCMS 3.2.6 "0day" vulnerability

Posted on venerdì 24 febbraio 2012 by Ivano Binetti

IBM X-Force (http://xforce.iss.net/) published my new "0day" vulnerability regarding Multiple Vulnerabilities discovered in ForkCMS 3.2.6 and lower:
http://xforce.iss.net/xforce/xfdb/73394