(Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability

This vulnerability allows remote attackers to escape Protected Mode on vulnerable installations of Internet Explorer. Internet Explorer Protected Mode consists of a Medium Integrity and a Low Integrity process. The Low Integrity process is only allowed to write to special Low Integrity locations...

CiscoKits TFTP Directory Traversal

CiscoKits TFTP Server Directory Traversal Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1022 21/07/2011 Issue Discovered 03/08/2011 Vendor Notified Vendor Replied to Disclose 04/08/2011 Advisory Released Class: Information Disclosure Severity: Medium Overview:...

WordPress e-Commerce 3.8.5 Cross Site Scripting

Vulnerability ID: HTB23031 Reference: http://www.htbridge.ch/advisory/xssinwpecommerce.html Product: WP e-Commerce Vendor: Instinct Entertainment http://getshopped.org/ Vulnerable Version: 3.8.5 and probably prior Tested on: 3.8.5 Vendor Notification: 13 July 2011 Vulnerability Type: XSS Cross Si...

SAP NetWeaver Internet Sales-Multiple XSS - 2

Application: SAP NetWeaver Vendor URL: Bugs: XSS Risk: Medium Exploits: YES Reported: 08.04.2011 Vendor response: 10.04.2011 Patched: 13.11.2011 Date of Public Advisory: 13.03.2012 Reference: SAP Security Note 1584030 Author: Dmitriy Chastuchin ERPScan Description SAP NetWeaver Internet...

VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities

Document Title: =============== VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities Release Date: ============= 2011-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 120 Product & Service Introduction: =============================== V&V messenger is an insta...

Stable Channel Update

The Google Chrome team is pleased to announce the arrival of Chrome 13.0.782.107 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Spanning 5200+ revisions, Chrome 13 contains some exciting new features like Instant Pages prerendering technology. To find out about other new feature...

MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities

Document Title: =============== MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 125 Product & Service Introduction: =============================== MODx helps you take control of...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

Multiple XSS in GBook PHP guestbook

Vulnerability ID: HTB23028 Reference: http://www.htbridge.ch/advisory/multiplexssingbookphpguestbook.html Product: GBook PHP guestbook Vendor: PHPJunkyar http://www.phpjunkyard.com Vulnerable Version: 1.7 and probably prior Tested on: 1.7 Vendor Notification: 06 July 2011 Vulnerability Type: XSS...

Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability

Document Title: =============== Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/234.wmv View: http://www.youtube.com/watch?v=b9p4BZ0vsAI Release Date: ============= 2011-07-28 Vulnerability Laboratory...

Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability

Document Title: =============== Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=181 Release Date: ============= 2011-07-27 Vulnerability Laboratory ID VL-ID: ===================================...

Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability

Document Title: =============== Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=181 Release Date: ============= 2011-07-27 Vulnerability Laboratory ID VL-ID: ===================================...

Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability

Document Title: =============== Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/234.wmv View: http://www.youtube.com/watch?v=b9p4BZ0vsAI Release Date: ============= 2011-07-27 Vulnerability Laboratory...

[PT-2011-05] Cross-Site Scripting in Koha Library Software

---------------------------------------------------------------------- PT-2011-05 Positive Technologies Security Advisory Cross-Site Scripting in Koha Library Software ---------------------------------------------------------------------- --- Vulnerable software Koha Library Software version 3.2....

Spider Player v2.3.11 - Memory Corruption Vulnerability

Document Title: =============== Spider Player v2.3.11 - Memory Corruption Vulnerability Release Date: ============= 2011-07-23 Vulnerability Laboratory ID VL-ID: ==================================== 97 Product & Service Introduction: =============================== Spider Player supports nearly...

T Online Browser v6.x - ClickJacking Vulnerability

Document Title: =============== T Online Browser v6.x - ClickJacking Vulnerability Release Date: ============= 2011-07-23 Vulnerability Laboratory ID VL-ID: ==================================== 143 Product & Service Introduction: =============================== Mit dem vielseitigen Browser 6.0...

Wordpress Audio Player v2.0b6 - Web Vulnerability

Document Title: =============== Wordpress Audio Player v2.0b6 - Web Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 84 Product & Service Introduction: =============================== Wordpress Audio Player Plugin/Addon...

Nagios Admin 1.0 & 0.9.2 - Multiple Web Vulnerabilities

Document Title: =============== Nagios Admin 1.0 & 0.9.2 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 52 Product & Service Introduction: =============================== Ab sofort steht der...

Nagios Admin 1.0 & 0.9.2 - Multiple Web Vulnerabilities

Document Title: =============== Nagios Admin 1.0 & 0.9.2 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 52 Product & Service Introduction: =============================== Ab sofort steht der...

Computerviren - Arten, Verfahren, Technik & Geschichte

Document Title: =============== Computerviren - Arten, Verfahren, Technik & Geschichte References: =========== https://www.vulnerability-lab.com/resources/documents/194.pdf Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 194 Discovery...