elproLOG MONITOR WebAccess 2.1 - Multiple Web Vulnerabilities

Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System: ==================================== 6.7 Introduction: ============...

CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ PDFCool Studio Buffer Overflow Vulnerability 1. Advisory Information Title: PDFCool Studio Buffer Overflow Vulnerability Advisory ID: CORE-2013-0828 Advisory URL:...

WebAssist PowerCMS PHP - Multiple Web Vulnerabilities

Document Title: =============== WebAssist PowerCMS PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1098 Release Date: ============= 2013-09-27 Vulnerability Laboratory ID VL-ID: ==================================== 1098...

WebAssist PowerCMS PHP - Multiple Web Vulnerabilities

Document Title: =============== WebAssist PowerCMS PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1098 Release Date: ============= 2013-09-27 Vulnerability Laboratory ID VL-ID: ==================================== 1098...

Adobe - CS Flash Cross Site Vulnerability & Filter Bypass

Document Title: =============== Adobe - CS Flash Cross Site Vulnerability & Filter Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1022 Release Date: ============= 2013-09-25 Vulnerability Laboratory ID VL-ID: ====================================...

[SpearPhisher] A Simple Phishing Email Generation Tool

SpearPhisher is a simple point and click Windows GUI tool designed for mostly non-technical people who would like to supplement the education and awareness aspect of their information security program. Not only is it useful to non-technical folks, penetration testers may find it handy for sending...

Cisco Prime LAN Management Solution Cross-Frame Scripting Vulnerability

A vulnerability in Cisco Prime LAN Management Solution could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an...

EPS Viewer Buffer Overflow Vulnerability

Core Security Technologies Advisory - EPS Viewer is prone to a security vulnerability when processing EPS files. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing EPS Viewer users to open a specially crafted EPS file client-side...

EPS Viewer Buffer Overflow Vulnerability

1. Advisory Information Title: EPS Viewer Buffer Overflow Vulnerability Advisory ID: CORE-2013-0808 Advisory URL:http://www.coresecurity.com/core-labs/advisories/eps-viewer-buffer-overflow-vulnerability Date published: 2013-08-28 Date of last update: 2013-08-28 Vendors contacted: EPS Viewer Team...

Aloaha PDF Suite Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-0805 1. Advisory Information Title: Aloaha PDF Suite Buffer Overflow Vulnerability Advisory ID: CORE-2013-0805 Advisory URL:http://www.coresecurity.com/advisories/aloaha-pdf-suite-buffer-overflow-vulnerability Date published: 2013-08-28 Date of last update:...

11 Firefox Add-ons to Hack and PenTest

1. Tamper Data Tamper data is an great tool to to view and modify HTTP/HTTPS headers and post parameters. We can alter each request going from our machine to destination host with this. Thus it helps in security testing web application by modifying POST parameters. It can be used in performing XS...

xml2 Fuzzer 1.0 exploit

xml2 Fuzzer is a fuzzing utility that daemonizes in order to fuzz the client side of a web browser. / xml2 fuzz ver 1.0 -- C:\x90c\xml2fuzz ./xmlfuzz / \ / \ | || | | | \ / / . || | | | / | include include define FUZZDAEMONPORT 9090 / fuzz type / define AAAAFUZZ 1 define NUMERICFUZZ 2 static char...

Fedora 18 : subversion-1.7.11-1.fc18.1 (2013-13672)

This update includes the latest release of Apache Subversion 1.7, version 1.7.11. Several security vulnerabilities are fixed in this update : Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If...

[Raft v3.0.1] Response Analysis and Further Testing Tool

Not an inspection proxy RAFT is a testing tool for the identification of vulnerabilities in web applications. RAFT is a suite of tools that utilize common shared elements to make testing and analysis easier. The tool provides visibility in to areas that other tools do not such as various client...

JeeCMS任意用户密码找回漏洞

简要描述： 请不要在客户端验证找回密码所用邮箱或手机号 详细说明： https://images.seebug.or...

http-dombased-xss NSE Script

It looks for places where attacker-controlled information in the DOM may be used to affect JavaScript execution in certain ways. The attack is explained here: See also: http-stored-xss.nse http-phpself-xss.nse http-xssed.nse http-unsafe-output-escaping.nse Script Arguments...

Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability

Title: ====== Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability Date: ===== 2013-07-20 References: =========== http://vulnerability-lab.com/getcontent.php?id=775 BARRACUDA NETWORK SECURITY ID: BNSEC-723 VL-ID: ===== 775 Common Vulnerability Scoring System:...

Microsoft EPD - CS Flash Cross Site Web Vulnerability

Document Title: =============== Microsoft EPD - CS Flash Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Microsoft Security Response Center MSRC ID: 15156 Release Date: ============= 2013-07-28 Vulnerability Laboratory I...

Microsoft EPD - CS Flash Cross Site Web Vulnerability

Document Title: =============== Microsoft EPD - CS Flash Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Microsoft Security Response Center MSRC ID: 15156 Release Date: ============= 2013-07-28 Vulnerability Laboratory I...

Open Source Steganography Web Service: DarkJPEG

DarkJPEG is a new generation open source steganography web service. It is supposed to serve people’s needs for the freedom of communication even in those countries which break human rights by forcing some kind of Internet censorship or even denying to use cryptography by law. The service uses...