CVE-2013-0937

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors...

[Fern Wifi Cracker] Wireless security auditing and attack software to crack and recover WEP/WPA/WPS keys

Fern Wifi Cracker is a Wireless security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to crack and recover WEP/WPA/WPS keys and also run other network based attacks on wireless or ethernet based networks...

Matrix42 Service Store 5.3 SP3 Cross Site Scripting

43zsec SECURITY ADVISORY CVE ID : CVE-2013-2504 Product: Service Store 5.3 SP3 5.33.946.0 Vendor: matrix42 - member of asseco group Subject: Cross-site Scripting - XSS Classification: PCI 2.0: 6.5.7 PCI 1.2: 6.5.1 OWASP: A2 CWE: 79 CAPEC: 19 WASC: 08 Risk: High Effect: Remotely exploitable Author...

cookie domain tailmatch

libcurl is vulnerable to a cookie leak vulnerability when doing requests across domains with matching tails. When communicating over HTTPS and having libcurl's cookie engine enabled, libcurl stores and holds cookies for use when subsequent requests are done to hosts and paths that match those kep...

CURL-CVE-2013-1944 cookie domain tailmatch

libcurl is vulnerable to a cookie leak vulnerability when doing requests across domains with matching tails. When communicating over HTTPS and having libcurl's cookie engine enabled, libcurl stores and holds cookies for use when subsequent requests are done to hosts and paths that match those kep...

Avira License - Cross Site Scripting Web Vulnerability

Document Title: =============== Avira License - Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=916 Avira Case-ID 99287655 Release Date: ============= 2013-04-12 Vulnerability Laboratory ID VL-ID:...

PT-2013-1237

Name of the Vulnerable Software and Affected Versions cURL versions prior to 7.30.0 cURL versions prior to 7.34.0-r1 libcurl versions prior to 7.30.0 Description The issue concerns a cookie leak vulnerability in cURL and libcurl, allowing remote attackers to steal cookies via a matching suffix in...

CVE-2013-1168

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a sessio...

CVE-2013-1168

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a sessio...

CVE-2013-1168: Undefined Security Weakness

The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging knowledge of a sessio...

PT-2013-2936

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace Application Server versions 7.0 through 7.1MR1 Patch 1 Cisco Unified MeetingPlace Application Server versions 8.0 through 8.0MR1 Patch 0 Cisco Unified MeetingPlace Application Server versions 8.0 through 8.5MR2 Patch...

[Ghost Phisher] GUI suite for phishing and penetration attacks

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy various internal networking servers for networking, penetration testing and...

Cookies can be set for a top-level domain – Opera Security Advisories

Browsers should only allow cookies to be set for the website that created them. In some specific cases, Opera does not apply this restriction correctly, and allows a website to set a cookie for its entire top-level domain such as .com or .co.uk. A malicious site could then redirect the user to...

PayPal GP+ Cross Site Scripting

Title: ====== Paypal Bug Bounty 46 - Persistent Web Vulnerability Date: ===== 2013-03-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=805 PayPal Security UID: esj1f86plc VL-ID: ===== 805 Common Vulnerability Scoring System: ==================================== 4.3...

CVE-2013-0510: Undefined Security Weakness

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies...

Paypal Bug Bounty #46 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 46 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=805 PayPal Security UID: esj1f86plc Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #48 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 48 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=830 PayPal Security UID: dyf1f8cejz Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #48 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 48 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=830 PayPal Security UID: dyf1f8cejz Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #46 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 46 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=805 PayPal Security UID: esj1f86plc Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

PT-2013-2232

Name of the Vulnerable Software and Affected Versions Drupal Taxonomy Manager module versions 6.x-2.x before 6.x-2.2 Drupal Taxonomy Manager module versions 7.x-1.x before 7.x-1.0-rc1 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authenticatio...