Mozilla Firefox 3.6.23 - Z0D Code Execution Vulnerability

Document Title: =============== Mozilla Firefox 3.6.23 - Z0D Code Execution Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/329.wmv View: http://www.youtube.com/watch?v=oTx1QP2Msg Release Date: ============= 2011-12-03 Vulnerability Laboratory ID...

Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress clickdesk-live-support-chat plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Www.Aria-security.com/forum/ Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities Download......:...

SecurityTube Metasploit Framework Expert Certification Launched !

SecurityTube Metasploit Framework Expert Certification Launched ! Not so long ago, we had posted the launch of the SecurityTube Wi-Fi Security Expert SWSE program. The certification has been a success and it has students from over 25+ countries from around the world. The SecurityTube Metasploit...

WordPress ClickDesk Live Support Plugin 2.0 - Cross Site Scripting

WordPressClickDesk Live Support plugin's "cdwidget" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker...

WordPress Plugin ClickDesk Live Support 2.0 - 'cdwidget' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50778/info ClickDesk Live Support plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin ClickDesk Live Support 2.0 - cdwidget Cross-Site Scripting

WordPress Plugin ClickDesk Live Support 2.0 - cdwidget Cross-Site Scripting source: https://www.securityfocus.com/bid/50778/info ClickDesk Live Support plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

WordPress Clickdesk Live Support Chat Cross Site Scripting

Www.Aria-security.com/forum/ Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/clickdesk-live-support-chat/ Bug Found.....: http://Aria-Security.Com/forum/ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.i...

Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

CSWorks LiveData Service vulnerable to denial-of-service (DoS)

Overview LiveData Service, a server component of CSWorks contains a denial-of-service DoS vulnerability. LiveData Service, a server component of CSWorks, contains an issue when processing TCP packets, which may lead to a denial-of-service DoS. Kuang-Chun Hung of Security Research and Service...

XBox Security Chief Says Account Hacks Linked To Phishing, Resale Schemes

In a pattern that is becoming more common, hackers are hijacking XBox Live accounts, then tricking them out with expansion modules and other add-ons before trying to resell them to unwitting third parties. Recent XBox Live account hijacks are most likely the product of phishing and identity theft...

Solaris 8 (x86) : 121431-54

SunOS 5.8x86 5.9x86 5.10x86: Live Upgra. Date this patch was last updated by Sun : Aug/04/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Roundcube Webmail 0.3.1 - Cross-Site Request Forgery SQL Injection

Roundcube Webmail 0.3.1 - Cross-Site Request Forgery SQL Injection Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. "POST" data in...

Roundcube Webmail 0.3.1 - Cross-Site Request Forgery / SQL Injection

Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. "POST" data in http://site.com/roundcube/index.php...

Directory traversal

Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. dot dot in the showlang parameter...

CVE-2010-4858

CVE-2010-4858 is corroborated by multiple connected sources as a local file inclusion (LFI) vulnerability in DNET Live-Stats 0.8, specifically RC8. The issue arises from improper sanitization of user input, enabling directory traversal to access arbitrary files via the showlang parameter, or, per...

Star Develop Live Help 2.0 Disclosure / Bypass

================================================ Star Develop Live Help v2.0 Mullti Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --'...

CVE-2011-3742

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

Information disclosure

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

CVE-2011-3742

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...