Yealink VOIP Phone - Persistent Cross-Site Scripting

============================================================== Secur-I Research Group Security Advisory SV-2012-005 ============================================================== Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage:...

Sun Java Web Start Plugin Command Line Argument Injection (2012)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Java Web...

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities =================================================== Secur-I Research Group Security Advisory SV-2011-004 =================================================== Title: NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities Product:...

Fedora 15 : roundcubemail-0.5.1-1.fc15 (2011-4038)

Roundcube Webmail upstream has released v0.5.1 version: 1 http://trac.roundcube.net/wiki/Changelog which adds one security hardening: 1, Security: add optional referer check to prevent CSRF in GET requests Relevant patches: 2 http://trac.roundcube.net/changeset/4503 3...

CMSQLite / CMySQLite 1.3 - Cross-Site Request Forgery

Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor: http://www.cmsqlite.net Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System CMS. It's perfect for freelancers, self-employeds, clubs and...