Fatt Free CRM Cross Site Scripting

Hello Guys this is Sam , CEO and Chief Security Architect Provensec LLC . Please take note of the following submission. Affected software: Fatt Free CRM - URL: http://www.fatfreecrm.com/ Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Fat Free CRM is a...

Barracuda Web Security Flex 4.1 - Persistent Vulnerabilities

Document Title: =============== Barracuda Web Security Flex 4.1 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=750 BARRACUDA NETWORK SECURITY ID: BNSEC-699 Release Date: ============= 2014-08-22 Vulnerability Laboratory ID...

Barracuda Networks WSF - Filter Bypass & Persistent Bug

Document Title: =============== Barracuda Networks WSF - Filter Bypass & Persistent Bug References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1205 View: http://www.youtube.com/watch?v=1D9PS4bW8VM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=749 Release Date:...

Feng Office - Stored XSS

No description provided by source. Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management,...

Barracuda Networks WSF - Filter Bypass & Persistent Bug

Document Title: =============== Barracuda Networks WSF - Filter Bypass & Persistent Bug References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1205 View: http://www.youtube.com/watch?v=1D9PS4bW8VM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=749 Release Date:...

WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery (Admin Persistent) Cross-Site Scripting

WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery Admin Persistent Cross-Site Scripting disqus csrf reset -- -- alert1;' /...

WordPress Plugin Disqus 2.7.5 - Cross-Site Request Forgery (Admin Persistent) / Cross-Site Scripting

disqus csrf reset -- -- alert1;' /...

Study: Uyghur Remain in Crosshairs of Targeted Attacks

It’s no secret that activists groups supporting the Uyghur and other ethnic minorities living either in exile or in oppressed nations have been in the crosshairs of targeted attacks for years. Regimes use phishing emails, other social engineering tactics, and drive-by downloads to infect computer...

CVE-2014-2357

The GPT library in the Telegyr 8979 Master Protocol application in SUBNET SubSTATION Server 2 before SSNET 2.12 HF18808 allows remote attackers to cause a denial of service persistent service crash via a long RTU-to-Master message...

Code injection

The GPT library in the Telegyr 8979 Master Protocol application in SUBNET SubSTATION Server 2 before SSNET 2.12 HF18808 allows remote attackers to cause a denial of service persistent service crash via a long RTU-to-Master message...

Espo CRM Cross Site Scripting

Affected software: http://www.espocrm.com/demo/ Discovered by: Ankit Bharathan Website: ankitbharathan.blogspot.com Type of vulnerability: Stored xss Description: A web application that allows you to see, enter and evaluate all your company relationships regardless of the type. People, companies,...

Mobile Broadband Modems Seen as Easy Targets for Attackers

LAS VEGAS–Mobile broadband modems can be a great alternative if you can’t find a WiFi network or don’t trust the ones you can find. But many of the models sold by the major manufacturers contain bugs and functionality that a remote attacker can exploit without much difficulty. Much of the market...

Feng Office Cross Site Scripting

Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management, Tasks, E-mails, Documents, Interna...

POWELIKS — A Persistent Windows Malware Without Any Installer File

Malware is nothing but a malicious files which is stored on an infected computer system in order to damage the system or steal sensitive data from it or perform other malicious activities. But security researchers have uncovered a new and sophisticated piece of malware that infects systems and...

Ebay Inc Magento ProStore CP Filter Bypass

Document Title: =============== Ebay Inc Magento ProStore CP 4 - Filter Validation Bypass & Persistent Payment Information Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID: EIBBP-28091 Video:...

Ebay Magento PS CP #4 - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Magento PS CP 4 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID: EIBBP-28091 Video: http://www.vulnerability-lab.com/getcontent.php?id=1276 View:...

Ebay Inc Magento PS - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Inc Magento PS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1276 Video: https://www.youtube.com/watch?v=v8knMYRUOQ Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID:...

Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 #37 - Filter Bypass & Multiple Vulnerabilities

Document Title: =============== Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 37 - Filter Bypass & Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263...

SkaDate Lite 2.0 - Multiple CSRF And Persistent XSS Vulnerabilities

No description provided by source. !-- SkaDate Lite 2.0 Multiple XSRF And Persistent XSS Vulnerabilities Vendor: Skalfa LLC Product web page: http://lite.skadate.com | http://www.skalfa.com Affected version: 2.0 build 7651 Platform version: 1.7.0 build 7906 Summary: SkaDate Lite is a new platform...

Ebay Inc Magento PS - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Inc Magento PS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1276 Video: https://www.youtube.com/watch?v=v8knMYRUOQ Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID:...