Cross-site Scripting (XSS) Vulnerabilities in GBook PHP guestbook

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in GBook PHP guestbook which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in GBook PHP guestbook The vulnerability exists due to input sanitation error in th...

NGS00057 Technical Advisory: Apple Mac OS X ImageIO Integer Overflow

======= Summary ======= Name: Apple Mac OS X ImageIO TIFF Integer Overflow Release Date: 28 June 2011 Reference: NGS00057 Discoverer: Dominic Chell [email protected] Vendor: Apple Vendor Reference: 142522746 Systems Affected: Mac OS X v10.6 through v10.6.6, Mac OS X Server v10.6 through...

NGS00052 Technical Advisory: Apple Mac OS X Image RAW Multiple Buffer Overflows

======= Summary ======= Name: OS X 10.6.6 Camera Raw Library Memory Corruption Release Date: 28 June 2011 Reference: NGS00052 Discoverer: Paul Harrington [email protected] Vendor: Apple Vendor Reference: 140299872 Systems Affected: OS X 10.6.6 with RawCamera.bundle 3.6 Risk: High...

Open-Realty 3.1.5 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23023 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesinopenrealty.html Product: Open-Realty Vendor: Transparent Technologies, Inc. http://www.open-realty.org/ Vulnerable Version: 3.1.5 and probably prior Tested on: 3.1.5 Vendor Notification: 07 June 2011...

FlatPress 0.1010.1 Cross Site Scripting

Vulnerability ID: HTB23022 Reference: http://www.htbridge.ch/advisory/xssinflatpress.html Product: FlatPress Vendor: Edoardo Vacchi http://flatpress.org Vulnerable Version: 0.1010.1 and probably prior Tested on: 0.1010.1 Vendor Notification: 07 June 2011 Vulnerability Type: XSS Cross Site Scripti...

Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method

Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...

Mozilla Prism - Stack Buffer Overflow Vulnerability

Document Title: =============== Mozilla Prism - Stack Buffer Overflow Vulnerability References: =========== View: http://www.youtube.com/watch?v=EfPMTmoD7OU Download: http://www.vulnerability-lab.com/resources/videos/217.wmv Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID...

U.S. Backs Research Into What Makes Cyber Criminals Tick

The following is an exclusive Threatpost interview with Samuel Weber, Program Director for the National Science Foundation’s Trustworthy Computing Program. The interview took place on Monday, June 27, 2011 at the RFIDSec 11 Conference on the campus of the University of Massachusetts, Amherst. The...

PT-2011-14: SQL injection vulnerability in BoonEx Dolphin

Positive Research Center has discovered an SQL injection vulnerability in Dolphin 6.1. Application incorrectly validates input data. That allows attackers to conduct SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database. Settings transferred to the...

PT-2011-22: Buffer overflow in Adobe Flash Player

The specialists of the Positive Research center have revealed a buffer overflow vulnerability in Adobe Flash Player. The vulnerability allows remote attackers to execute arbitrary code. How to fix Update your software up to the latest version Advisory status 28.06.2011 - Vendor is notified...

U.S. Playing Catch Up in Security for Contactless Devices

AMHERST, MASS.– The U.S. may boast the world’s largest economy, richest technology companies and a lion’s share of its top research universities. But when it comes to the subject of security of RFID Radio Frequency ID and other contactless technologies, America is still playing catch-up. The U.S....

Experts Converge at RFIDsec to Discuss NFC Security Implications

RFID security problems have been biting at the ankles of users and companies that deploy the technology for several years now, but they’ve been mostly on the fringes of mainstream security concerns. But now, as the technology becomes more widespread and pervasive, that is beginning to change...

PT-2011-09: Arbitrary Command Execution in ManageEngine ServiceDesk Plus 8.0.0

The specialists of the Positive Research center have revealed an arbitrary code execution vulnerability in ManageEngine ServiceDesk Plus. If Microsoft SQL Server is used as application database server, insufficient validation of input settings for /CustomReporthandler.do script that is use to...

PT-2011-10: Abritrary Files Loading in ManageEngine ServiceDesk Plus 8.0

The specialists of the Positive Research center have detected "Abritrary Files Loading" vulnerability in ManageEngine ServiceDesk Plus. Insufficient CSV file input filtering in user import script allows attackers with guest privileges account guest/guest overwrite an arbitrary file in bin folder ...

HTB23015: Easewe FTP ActiveX Control Multiple Insecure Methods

Vulnerability ID: HTB23015 Reference: http://www.htbridge.ch/advisory/easeweftpocxactivexcontrolexecuteinsecuremethod.html Product: Easewe FTP OCX ActiveX Control Vendor: Easewe Software http://www.ftpocx.com Vulnerable Version: 4.5.0.9 and probably prior Tested on: 4.5.0.9 Vendor Notification: 0...

Paltalk Messenger ActiveX Control Multiple Insecure Methods

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Paltalk Messenger, which can be exploited to overwrite arbitrary files. 1 Insecure methods in Paltalk Messenger ActiveX Control 1.1 The vulnerability is caused due to the Office Viewer ActiveX control Oa.ocx...

Microsoft Research: Cybercrime Surveys are Useless

Barely a week goes by that woeful statistics on the proliferation of cyber crime don’t make headlines in the trade and mainstream press. But a new study by Microsoft Research finds that many of those surveys are so rife with catastrophic statistical errors as to make their conclusions almost...

EA Sports Cross Site Scripting

Information -------------------- Name : XSS Persistent in EA Sports Software : EA Sports Main site Vendor Homepage : http://www.ea.com Vulnerability Type : XSS Persistent Severity : Very High Researcher : Juan Sacco Description ------------------ EA Sports is prone to a XSS Stored vulnerability...

Adobe SW Flashplayer - Memory Corruption Vulnerability

Document Title: =============== Adobe SW Flashplayer - Memory Corruption Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/206.wmv View: http://www.youtube.com/watch?v=619DCE40BVU Release Date: ============= 2011-06-19 Vulnerability Laboratory ID...

Adobe SW Flashplayer - Memory Corruption Vulnerability

Document Title: =============== Adobe SW Flashplayer - Memory Corruption Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/206.wmv View: http://www.youtube.com/watch?v=619DCE40BVU Release Date: ============= 2011-06-19 Vulnerability Laboratory ID...