Barracuda Link Balancer 330 - Input Validation Vulnerability

Document Title: =============== Barracuda Link Balancer 330 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=33 Barracuda - Link Balancer 330 Appliance - Firmware v1.3.2.005 & older versions Release Date: =============...

Prosieben Community 2011 - Persistent Web Vulnerability

Document Title: =============== Prosieben Community 2011 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=306 Release Date: ============= 2011-10-30 Vulnerability Laboratory ID VL-ID: ==================================== 306...

Barracuda Link Balancer 330 - Input Validation Vulnerability

Document Title: =============== Barracuda Link Balancer 330 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=33 Barracuda - Link Balancer 330 Appliance - Firmware v1.3.2.005 & older versions Release Date: =============...

Cross Site Request Forgery - Deleting User's Dashboards

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL:...

kernel: net: improve sequence number generation

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

Huawei Website - Multiple Web Vulnerabilities

Document Title: =============== Huawei Website - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=291 Release Date: ============= 2011-10-08 Vulnerability Laboratory ID VL-ID: ==================================== 291 Product &...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

SonicWall NSA 4500 Cross Site Scripting / Session Hijacking

While pentesting a a WIFI network on a customer, we found some vulnerabilities in the SonicWall NSA 4500. You can find details here: http://www.pentest.es/vulnssonicpoint.txt -------------------------------------------------- Title: ====== SonicWall products with incompatible MAC spoofing...

SonicWALL - SessId Cookie Brute Force Admin Session Hijacking

SonicWALL - SessId Cookie Brute Force Admin Session Hijacking source: https://www.securityfocus.com/bid/49930/info SonicWall NSA 4500 is prone to an HTML-injection vulnerability and a session-hijacking vulnerability. Exploiting these issues can allow an attacker to hijack a user's session and gai...

Multiple vulnerabilities in SonicWall

While pentesting a a WIFI network on a customer, we found some vulnerabilities in the SonicWall NSA 4500. You can find details here: http://www.pentest.es/vulnssonicpoint.txt -------------------------------------------------- Title: ====== SonicWall products with incompatible MAC spoofing...

SonicWALL - 'SessId' Cookie Brute Force / Admin Session Hijacking

source: https://www.securityfocus.com/bid/49930/info SonicWall NSA 4500 is prone to an HTML-injection vulnerability and a session-hijacking vulnerability. Exploiting these issues can allow an attacker to hijack a user's session and gain unauthorized access to the affected application, or run...

Symantec IM Manager Administrator Console Multiple Issues

SUMMARY Symantec IM Manager is vulnerable to Code Injection, Cross-Site Scripting and SQL Injection. Successful exploitation of these vulnerabilities could result in injection/execution of arbitrary code in the context of the browser or the application. AFFECTED PRODUCTS Product | Version |...

Microsoft Windows SSL/TLS信息泄露漏洞

CVE ID: CVE-2011-3389 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在SSL/TLS协议的实现上存在信息泄露漏洞，远程攻击者可利用此漏洞泄露敏感信息并劫持用户会话。 此漏洞源于在CBC模式中结合对称密码套件使用Secure Sockets Layer 3.0 SSL和Transport Layer Security 1.0 TLS 协议时出现的设计错误，通过中间人攻击加密HTTPS会话。 Microsoft Windows Microsoft Windows XP Home Microsoft Windows ...

ServersCheck Monitoring 8.8.6 Session Hijacking / XSRF

Title: ====== ServersCheck Monitoring v8.8.6 - Multiple Web Vulnerabilities Date: ===== 2011-09-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=93 VL-ID: ===== 93 Introduction: ============= ServersCheck is a Belgian based and privately owned technology company found...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

Sonicwall Viewpoint 6.x Session Hijacking

Title: ====== Sonicwall Viewpoint v6.x - Multiple Web Vulnerabilities Date: ===== 2011-09-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=195 VL-ID: ===== 195 Introduction: ============= SonicWALL® ViewPoint™ ist ein benutzerfreundliches webbasiertes Reporting-Tool,...

Barracuda IMFirewall 620 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda IMFirewall 620 - Multiple Web Vulnerabilities References Source: ==================== Barracuda IM Firewall 620 - Model Firmware v4.2.01.004 & older versions Please view how to explain an advisory on the half way = http://www.securityfocus.com/bid/37248...

Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...

Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...