OSVDB: The Open Source Vulnerability Database

User Profile for aushack

General Information

Registered On:	2008-02-17
Personal Website:	www.aushack.com
Company:	www.osisecurity.com.au
Location:	Sydney, Australia

User Role:	User
User Score:	33.80
30 day score:	0.00

InfoSec Experience:	Ten years working in auditing, pentests, firewalls etc. A Metasploit developer.
Why Involved:	Usually when I write Metasploit modules I research references and add OSVDB IDs etc.. or pentests of course. Often the OSVDB record is incomplete or inaccurate.
Shamless Plug:	OSI Security Pty Ltd, Sydney Australia based IT Security consulting and penetration testing firm.

Latest Activity

Latest Approved changes:

373 - GAMSoft TelSrv Multiple Field Overflow DoS
72232 - Skype for Mac Message Processing Remote Code Execution
65451 - PRTG Traffic Grapher login.htm url Parameter XSS
55586 - Iomega StorCenter Pro Session Identifier Prediction Weakness
54881 - SonicWALL SSL-VPN cgi-bin/welcome/VirtualOffice err Parameter Remote Format String
54551 - ContentKeeper Web .htaccess Misconfiguration Authentication Bypass
54552 - ContentKeeper benetool Local Privilege Escalation
53276 - ConnX frmLoginPwdReminderPopup.aspx txtEmail Parameter SQL Injection
53196 - Asbru Web Content Management page.asp id Parameter SQL Injection
53197 - Asbru Web Content Management login.asp url Parameter XSS
46210 - Microsoft Windows Installer msiexec.exe /uninstall Option GUID Value Overflow
44252 - Tumbleweed SecureTransport FileTransfer ActiveX TransferFile() Method remoteFile Variable Overflow
43149 - RemotelyAnywhere HTTP Service /img/ XSS
34992 - webMethods Glue Management Console resource Parameter Traversal Arbitrary File Access
29295 - Google Mini Search Appliance client Parameter Path Disclosure
32269 - ContentKeeper cgi-bin/ck/changepw.cgi Cleartext Password Disclosure
29171 - MySource Matrix sq_remote_page_url Function Unauthorized Proxy
29009 - CA eSCC / eTrust Audit Web Server Path Disclosure
29010 - CA eSCC / eTrust Audit Unspecified Arbitrary File Manipulation
29011 - CA eSCC / eTrust Audit Event System Unspecified Replay Attack
20160 - Apple Safari Javascript Crafted Function Body DoS
68931 - Spring Security URL Path Parameter Constraints Bypass
65451 - PRTG Traffic Grapher login.htm url Parameter XSS
37482 - RKD Software BarCode ActiveX (BarCodeAx.dll) BeginPrint Method Overflow
40521 - Alcatel OmniPCX Enterprise Communication Server Unified Maintenance Tool masterCGI user Variable Arbitrary Command Execution
37579 - Salamander peviewer.spl PDB Debug Handling Arbitrary Code Execution
48752 - mIRC PRIVMSG Message Handling Remote Overflow
55586 - Iomega StorCenter Pro Session Identifier Prediction Weakness
54881 - SonicWALL SSL-VPN cgi-bin/welcome/VirtualOffice err Parameter Remote Format String
50342 - Cain & Abel RDP Decoder .rdp File Handling Overflow

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.