VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2009-0017 Synopsis: VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues Issue date:...

CVE-2009-3731

Multiple cross-site scripting XSS vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks...

CVE-2009-3731

CVE-2009-3731 describes multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help used by VMware products (e.g., vCenter/ESX/Server, Lab Manager, Stage Manager). The root cause is insufficient sanitization of inbound input in WebWorks Help output formats, enabling remote attackers to i...

Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability

ShineShadow Security Report 16122009-15 TITLE Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability BACKGROUND Due to its high level of professionalism and dedication, Kaspersky Lab has become a market leader in the development of antivirus protection. The company’s main produc...

Kaspersky Lab (Multiple Products) - Local Privilege Escalation

Kaspersky Lab Multiple Products - Local Privilege Escalation ShineShadow Security Report 16122009-15 TITLE Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability BACKGROUND Due to its high level of professionalism and dedication, Kaspersky Lab has become a market leader in the...

Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits ======================================================================== Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability ======================================================================== Title: Kaspersky Lab...

Kaspersky Lab Multiple products privilege escalation

BASES directory contains executable files and has weak security permissions...

Kaspersky Lab (Multiple Products) - Local Privilege Escalation

ShineShadow Security Report 16122009-15 TITLE Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability BACKGROUND Due to its high level of professionalism and dedication, Kaspersky Lab has become a market leader in the development of antivirus protection. The company’s main produc...

VMSA-2009-0017:VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues

VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0017 VMware Security Advisory Synopsis: VMware vCenter, ESX patch and vCenter Lab Manager releases address...

Gumblar Continues to Spread, Thousands of Sites Infected

Months after it first appeared on the scene, the Gumblar malware continues to infect thousands of servers across the Internet and is closing in on nearly 80,000 servers pointing to the hosts that are serving the malware. In just the last month, the number of servers redirecting users to the Gumbl...

Unfixed XSS vulnerability at www.karnaticlabrecords.com

Security researcher Spax Empires, has submitted on 30/11/2009 a cross-site-scripting XSS vulnerability affecting www.karnaticlabrecords.com, which at the time of submission ranked 10688288 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Seattle Lab Mail 5.5 POP3 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Seattle Lab...

PHP 5.2.11/5.3.0 Multiple Vulnerability

Exploit for unknown platform in category remote exploits ========================================= PHP 5.2.11/5.3.0 Multiple Vulnerabilities ========================================= Title: PHP 5.2.11/5.3.0 Multiple Vulnerabilities CVE-ID: OSVDB-ID: Author: Maksymilian Arciemowicz Published:...

Inside the URLZone Trojan Network

Security researchers tracking the URL Zone malware/botnet have stumbled upon a new tactic being used by cyber-criminals to hide information on the money mules being used to transfer stolen funds from compromised online bank accounts. URLZone, which targets computer users in Western Europe, is a...

{PRL} Cerberus FTP server 3.0.6 Pre-Auth DoS

Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1 Introduction =============== Cerberus FTP...

VB 2009: Stefan Tanase on Web 2.0 Threats and Anti-Social Networking

Digital Underground podcast with Dennis Fisher Dennis Fisher talks with Stefan Tanase, senior security researcher at Kaspersky Lab, live from Virus Bulletin 2009 about the threats on social networking sites and the privacy and security concerns presented by Web 2.0 technologies. Here are the slid...

subversion

New subversion packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2411 Here are the details from the Slackware 12.2...

googlesketchup-overflow.txt

/ Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchUp Pro 7 is a suite of powerful features and applications...

Google SketchUp Pro 7.0 (.skp file) Remote Stack Overflow PoC

No description provided by source. / Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchUp Pro 7 is a suite of...

Google SketchUp Pro 7.0 - .skp Remote Stack Overflow (PoC)

Google SketchUp Pro 7.0 - .skp Remote Stack Overflow PoC / Title: Google SketchUp Pro 7.0 Model File Handling Remote Stack Overflow PoC Vendor: Google Inc. http://www.google.com Product Web Page: http://www.sketchup.com http://sketchup.google.com Current Version: 7.0.10247 Summary: Google SketchU...