New and Improved Madi Spyware Campaign Continues

Madi, the religiously-titled spyware that was discovered last week and thought to be dead, appears to be making a comeback, complete with updates. Kaspersky Lab researcher Nicolas Brulez reverse-engineered the new iteration of the malware, which surfaced on Wednesday. Unlike last week’s original...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Title: ====== SMF Board v2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-06-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=596 VL-ID: ===== 624 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: ============= Simple...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37 and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-thunderbird-14.0-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. For mor...

Religious 'Madi' Spyware Spies on Critical Infrastructure in Middle East

A new variety of spyware has been targeting users in Iran, Israel and the Middle East for the last eight months according to joint research from Israeli security software firm Seculert and Kaspersky Lab. The new malware is using a variety of odd techniques and misdirection to entice users to...

Joomla Board All Version Sql Vulnerability

Exploit Title : Joomla Board All Version Sql Vulnerability Author : Iranian Security & Research Team Discovered By : Nafsh Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 22/1/2012 - 13:30 Software Link : www.joomla.org Security Risk : High...

Arasism Remote Command Upload Vulnerability

Exploit Title : Arasism Remote Command Upload Vulnerability Author : Iranian Security & Research Team Discovered By : Ehram.shahmohamadi Home : sec-lab.ir Contact : research at sec-lab dot ir Portal Link : www.Arasism.Com Security Risk : High DorK : "Powered by Arasism.com"...

NDTV Cross Site Scripting Vulnerabilitiy

Exploit Title : NDTV Cross Site Scripting Vulnerabilitiy Author : Iranian Security & Research Team Discovered By : zilli0o0n Home : sec-lab.ir Contact : research at sec-lab dot ir Software Link : www.ndtv.com DorK : "Copyright NDTV Convergence Limited 2012"...

7sepehr SQL Injection Vulnerability

Exploit Title : 7sepehr SQL Injection Vulnerability Author : Iranian security & Research Lab Discovered By : Ehram.shahmohamadi Home : sec-lab.ir Contact : research at sec-lab dot ir Portal Link : www.7sepehr.Com Security Risk : High DorK : "Powered by 7sepehr.com"...

Joomla com_package - SQL Injection Vulnerability

Document Title: =============== Joomla compackage - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=652 Release Date: ============= 2012-07-07 Vulnerability Laboratory ID VL-ID: ==================================== 652 Common...

Event Script PHP CMS 1.1 SQL Injection

Title: ====== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites Date: ===== 2012-06-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=606 VL-ID: ===== 606 Common Vulnerability Scoring System: ==================================== 7 Introduction: ============= Even...

7sepehr SQL Injection

Exploit Title : 7sepehr SQL Injection Vulnerability Author : Iranian security & Research Lab Discovered By : Ehram.shahmohamadi Home : sec-lab.ir Contact : research at sec-lab dot ir Portal Link : www.7sepehr.Com Security Risk : High DorK : "Powered by 7sepehr.com" Expl0iTs:...

Keepass PM v1.22 - Filter & Validation Bypass Vulnerability

Document Title: =============== Keepass PM v1.22 - Filter & Validation Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/632.wmv View: http://www.youtube.com/watch?v=uFjxHa-8TZ0 Article: http://www.vulnerability-lab.com/getcontent.php?id=632...

AutoCAD Worm Stealing Designs, Blueprints

Security researchers have come across a new worm that is meant specifically to steal blueprints, design documents and other files created with the AutoCAD software. The worm, known as ACAD/Medre.A, is spreading through infected AutoCAD templates and is sending tens of thousands of stolen document...

VamCart v0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...

Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=547 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================...

KeePass Password Safe 1.22 - Encoding Filter Vulnerability

Document Title: =============== KeePass Password Safe 1.22 - Encoding Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=615 Release Date: ============= 2012-06-23 Vulnerability Laboratory ID VL-ID: ====================================...

XnView 1.98.8 - .tiff Image Processing Heap Overflow (2)

XnView 1.98.8 - .tiff Image Processing Heap Overflow 2 Application: XnView TIFF Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-15 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2...

XnView 1.98.8 - .PCT Image Processing Heap Overflow

XnView 1.98.8 - .PCT Image Processing Heap Overflow Application: XnView PCT Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-17 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report...

US and Israel developed Flame Malware against Iran

US and Israel developed Flame Malware against Iran Unnamed Western officials confirmed that Flame was developed by US and Israeli governments. The United States and Israel jointly developed the Flame computer virus that collected intelligence to help slow Iran's nuclear program. The massive piece...

IBM System Storage DS Storage Manager Profiler Multiple Vulnerabilities

Summary Through its extraordinary flexibility, reliability, and performance, the IBM® System Storage® series is designed to manage a broad scope of storage workloads that exist in today’s complex data center and do it effectively and efficiently. This flagship IBM disk system can bring simplicity...