Astaro Security Gateway 8.1 Cross Site Scripting

Title: ====== Astaro Security Gateway v8.1 - Input Validation Vulnerability Date: ===== 2011-12-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=193 VL-ID: ===== 193 Introduction: ============= Das Astaro Security Gateway 8.101 wurde speziell für den Schutz großer...

Oracle GlassFish Server Administration Bypass

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer Vendor: Oracle Vendor Reference: Systems Affected: Oracle GlassFish Server 2...

BigACE CMS 2.7.5 Cross Site Scripting

Title: BigACE CMS - XSS Vulnerabilities Software : BigACE CMS Software Version : 2.7.5 Vendor: http://www.bigace.de/ Vulnerability Published : 2011-10-11 Vulnerability Update Time : Status : Impact : Medium Bug Description : BigACE Content Management Systemversion update : 2.7.5 is vulnerable to...

Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability

Exploit for php platform in category web applications Title: ====== Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability Date: ===== 2011-12-22 Introduction: ============= Gwibber is a microblogging client for the GNOME desktop environment. It was created by Ryan Paul, a writer for Ars...

Yahoo Babelfish Service - Cross Site Scripting Vulnerability

Document Title: =============== Yahoo Babelfish Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=349 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ===================================...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Control Center 620 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=32 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== ...

Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability

Document Title: =============== Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=365 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability

No description provided by source. References: =========== http://www.vulnerability-lab.com/getcontent.php?id=129 Introduction: ============= Kaspersky Internet Security 2011 has everything that you need to stay safe and secure while you re surfing the web. It provides constant protection for you...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Title: ====== Barracuda Control Center 620 - Multiple Web Vulnerabilities Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=32 VL-ID: ===== 32 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Control Cente...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Exploit for jsp platform in category web applications Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Control Center Application of Barracuda Networks Copy of the Vendor Homepage: http://www.barracudanetworks.com/ns/products/ Abstract: =========...

NGS00137 Patch Notification: Websense Triton 7.6 - Reflected XSS in report management UI

Medium Risk Vulnerability in Websense Triton 15 December 2011 Ben Williams of NGS Secure has discovered a Medium risk vulnerability in Websense Impact: Reflected XSS Versions affected include: Websense Web Security Gateway Anywhere v7.6 Websense Web Security Gateway v7.6 Websense Web Security v7....

Yahoo Babelfish Translator - Cross Site Scripting

Document Title: =============== Yahoo Babelfish Translator - Cross Site Scripting References: =========== Download: http://www.vulnerability-lab.com/resources/videos/350.wmv View: http://www.youtube.com/watch?v=u74PrIXydi4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=350 Release...

Building Knight Rider Mode - Jalousien Remote Concert

Document Title: =============== Building Knight Rider Mode - Jalousien Remote Concert References: =========== Download: http://www.vulnerability-lab.com/resources/videos/359.wmv View: http://www.youtube.com/watch?v=bxjTgUaF40w Release Date: ============= 2011-12-15 Vulnerability Laboratory ID...

BETTELBOT v1.0 - We are the Robots

Document Title: =============== BETTELBOT v1.0 - We are the Robots References: =========== Download: http://www.vulnerability-lab.com/resources/videos/356.wmv View: http://www.youtube.com/watch?v=e0BKp9e8iec Release Date: ============= 2011-12-14 Vulnerability Laboratory ID VL-ID:...

CA20111208-01: Security Notice for CA SiteMinder

CA20111208-01: Security Notice for CA SiteMinder Issued: December 08, 2011 CA Technologies Support is alerting customers to a potential risk in CA SiteMinder. A vulnerability exists that can allow a malicious user to execute a reflected cross site scripting XSS attack. CA Technologies has issued...

Microsoft Unveils New Windows Defender Offline Tool

Microsoft has released a beta version of a new tool that can help victims of malware attacks recover from ugly infections, even if they don’t have the ability to reach the Internet. The Windows Defender Offline tool enables users to clean their systems of malware from a CD or other removable medi...

Buffer overflow in resolver

Buffer overflow in resolver Severity: medium CVE-2011-4315 Not vulnerable: 1.1.8+, 1.0.10+ Vulnerable: 0.6.18-1.1.7...

GoAhead Webserver 2.5 Cross Site Scripting

Title : GoAhead WebServer Multiple Cross Site Scripting Vulnerabilities Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.goahead.com/products/webserver/default.aspx Advisory : http://secpod.org/blog/?p=421 http://secunia.com/advisories/46896...

Hillstone Software HS TFTP Server Denial Of Service

Title : Hillstone Software HS TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.hillstone-software.com/hstftpdetails.htm Advisory : http://secpod.org/blog/?p=419...

Ipswitch TFTP Server 1.0.0.24 - Directory Traversal

Ipswitch TFTP Server 1.0.0.24 - Directory Traversal Title : Ipswitch TFTP Server Directory Traversal Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.whatsupgold.com/index.aspx Advisory : http://secpod.org/blog/?p=424...