Microsoft AdCenter Service - Cross Site Vulnerabilities

Document Title: =============== Microsoft AdCenter Service - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=447 MSRC ID: 12223 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID:...

Endian UTM Firewall 2.4.x Cross Site Scripting

Title: ====== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities Date: ===== 2012-02-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=436 VL-ID: ===== 436 Introduction: ============= The Endian Firewall is an open source GNU/Linux distribution that specializes on...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...

DeutschePost Website - Non Persistent Web Vulnerability

Document Title: =============== DeutschePost Website - Non Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=261 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 261...

Wordpress plugin Count-per-day plurality of defect and repair-vulnerability warning-the black bar safety net

Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Affected versions: 3.1.1 Author 6Scan http://6scan.com security team www.2cto.com Download address: http://wordpress.org/extend/plugins/count-per-day/ Official fix: This advisory is released after the vendor has responded and...

Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus

Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...

Zoho ManageEngine ADSelfService Plus 4.5 Cross Site Scripting

Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...

XSS Vulnerability on AOL Energy website

XSS Vulnerability on AOL Energy website A non-persistent Cross Site Scripting XSS vulnerability discovered on AOL Energy website. The similar Vulnerability is claimed by few other guys on some forums too. No clue that who found it first, But THN got update from Vansh & Vaibhuv from India...

XSS Vulnerability on AOL Energy website

XSS Vulnerability on AOL Energy website A non-persistent Cross Site Scripting XSS vulnerability discovered on AOL Energy%3C%2Fscript%3E website. The similar Vulnerability is claimed by few other guys on some forums too. No clue that who found it first, But THN got update from Vansh & Vaibhuv from...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

Drupal CMS v7.5.x - Multiple Web Vulnerabilities

Document Title: =============== Drupal CMS v7.5.x - Multiple Web Vulnerabilities References Source: ==================== Released on the german ePost Security Cup http://www.deutschepost.de/dpag?lang=deEN&xmlFile=link10227921022790 Release Date: ============= 2011-09-17 Vulnerability Laboratory I...

Drupal CMS v7.5.x - Multiple Web Vulnerabilities

Document Title: =============== Drupal CMS v7.5.x - Multiple Web Vulnerabilities References Source: ==================== Released on the german ePost Security Cup http://www.deutschepost.de/dpag?lang=deEN&xmlFile=link10227921022790 Release Date: ============= 2011-09-17 Vulnerability Laboratory I...

Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities

Document Title: =============== Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 227 Abstract Advisory Information: ============================== Vulnerability Lab Team...

FortiAnalyzer Appliance - Multiple Web Vulnerabilities

Document Title: =============== FortiAnalyzer Appliance - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=145 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 145...

Call execution timeout (100000 ms) (Veeam.Backup.SSH.PerlSoapException)

Article Applicability This article discusses an issue that only occurs when non-persistent Veeam Data Movers are used. The non-persistent data movers are only used when the account provided to Veeam Backup & Replication to connect to a Linux server does not have root or root-equivalent permission...

Didactum SensorProbe v2.x - Persistent Web Vulnerability

Document Title: =============== Didactum SensorProbe v2.x - Persistent Web Vulnerability Release Date: ============= 2011-08-23 Vulnerability Laboratory ID VL-ID: ==================================== 109 Product & Service Introduction: =============================== Netzwerkgestützte...

Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities

Document Title: =============== Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 5 Abstract Advisory Information: ============================== The Vulnerability-Lab Team discover...

Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities

Document Title: =============== Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 5 Abstract Advisory Information: ============================== The Vulnerability-Lab Team discover...

CGI Generic XSS (extended patterns)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected...