Security Advisory

Spentera publishes security advisories about vulnerabilities we discovered or identified through our security research in accordance with our vulnerability disclosure policy. It is our way of giving something back to the security community.
 
 

2012

 
 
Centreon Enterprise Server (menuXML.php) Blind SQL Injection Vulnerability
12 December 2012, Tom Gregory
PDF
 
 
PC Media Antivirus Insecure Library Loading Vulnerability
5 December 2012, Mada R. Perdhana
PDF
 
 
SmadAV 9.1 Null Pointer Dereference Vulnerability
13 November 2012, Mada R. Perdhana
PDF
 
 
Trend Micro Control Manager SQL Injection Vulnerability
27 September 2012, Tom Gregory
PyPDF
 
 
webERP <=4.08.4 SQL Injection Vulnerability
17 September 2012, Tom Gregory
PDF
 
 
Trend Micro InterScan Messaging Security Suite Multiple Vulnerabilities
13 September 2012, Tom Gregory
PDF
 
 
EzHomeTech EzServer <=6.4.017 Stack Overflow Vulnerability
18 June 2012, Tom Gregory
PDF
 
 
Hexamail Server <= 4.4.5 Persistent XSS Vulnerability
03 June 2012, Tom Gregory
PDF
 
 
Distinct TFTP Server <=3.10 Directory Traversal Vulnerability
13 April 2012, Tom Gregory
PDF
 
 
gtAkademik Gamatechno SQL Injection and Persistent Cross-site Scripting Vulnerability
20 February 2012, Mada R. Perdhana, Hanny Haliwela
PDF
 
 

2011

 
 
CyberLink Multiple Products Buffer Overflow Vulnerabilities
9 December 2011, Tom Gregory
PDF
 
 
Aviosoft Digital TV Player 1.x Stack Buffer Overflow Vulnerability
8 November 2011, Tom Gregory
PDF
 
 
ScriptFTP <=3.3 Remote Buffer Overflow (LIST) Vulnerability
20 September 2011, Tom Gregory
Zip PDF
 
 
MelOnPlayer 1.0.11.x Denial of Service Vulnerability
9 September 2011, Tom Gregory
Txt PDF
 
 
gtAkademika Academica Gamatechno Unrestricted File Upload Vulnerability
31 May 2011, Mada R. Perdhana
PDF
 
 
FTPGetter <=3.58.0.21 Remote Buffer Overflow (PASV)
3 February 2011, Tom Gregory
PDF
 
 
QuickShare File Server <=1.2.1 FTP Directory Traversal Vulnerability
3 February 2011, Tom Gregory
PDF
 
 

2010

 
 
HttpBlitz Web Server Denial of Service Vulnerability
24 December 2010, Hanny Haliwela
PDF
 
 
SolarFTP 2.0 Denial of Service Vulnerability
16 December 2010, Tom Gregory
PDF
 
 
FAQMasterFlex 1.2 SQL Injection Vulnerability
4 October 2010, Mada R. Perdhana
PDF
 
 
BS.Player <=2.56 Denial of Service Vulnerability
28 September 2010, Tom Gregory
PDF
 
 
MediaHuman Music Converter <=1.0.1 Denial of Service Vulnerability
17 September 2010, Tom Gregory
PDF
 
 
A-PDF All to MP3 Converter v.1.1.0 Local Buffer Overflow Vulnerability
16 September 2010, Tom Gregory
PDF
 
 
Batch Audio Converter <=1.0.0 Local Buffer Overflow Vulnerability
16 June 2010, Tom Gregory
PDF