Astaro Gateway v7.504 - Multiple Web Vulnerabilities

Document Title: =============== Astaro Gateway v7.504 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=8 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 8 Common...

CsForum v0.8 - Cross Site Scripting Vulnerability

Document Title: =============== CsForum v0.8 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=496 Release Date: ============= 2012-04-04 Vulnerability Laboratory ID VL-ID: ==================================== 496 Produ...

DirectAdmin v1.403 - Cross Site Scripting Vulnerability

Document Title: =============== DirectAdmin v1.403 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=486 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 486...

Drupal CMS 7.12 (latest stable release) Multiple Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Drupal CMS 7.12 latest stable release Multiple Vulnerabilities Date :...

Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.5.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=228 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 2...

LDAP Account Manager Pro v3.6 - Multiple Vulnerabilities

Document Title: =============== LDAP Account Manager Pro v3.6 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=458 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 45...

PT-2012-1248

Name of the Vulnerable Software and Affected Versions jquery versions prior to 1.9.0 Description The issue is related to the jQuery function not properly differentiating between HTML and selectors, allowing for cross-site scripting attacks. In vulnerable versions, jQuery determines whether the...

Sun Microsystems (Print) - Cross Site Scripting Vulnerability

Document Title: =============== Sun Microsystems Print - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=404 Release Date: ============= 2012-01-31 Vulnerability Laboratory ID VL-ID: ====================================...

MegaSWF - Persistant Cross Site Scripting Vulnerability

Document Title: =============== MegaSWF - Persistant Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=368 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 368...

Strato FAQ Center 2012 - Cross Site Scripting Vulnerability

Document Title: =============== Strato FAQ Center 2012 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=372 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ====================================...

Strato FAQ Center 2012 - Cross Site Scripting Vulnerability

Document Title: =============== Strato FAQ Center 2012 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=372 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ====================================...

SASHA v0.2.0 Mutiple XSS

Exploit Title: SASHA v0.2.0 Mutiple XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/sasha/files/ Version: 0.2.0 Category: webapps php Vulnerability When adding a new course to the schedule, the application relies on Client Side controls for input. This can easily be...

SASHA 0.2.0 Cross Site Scripting

Exploit Title: SASHA v0.2.0 Mutiple XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/sasha/files/ Version: 0.2.0 Category: webapps php Vulnerability When adding a new course to the schedule, the application relies on Client Side controls for input. This can easily be...

iGuard Biometric Access Control - Multiple Vulnerabilities

Title: ====== iGuard Biometric Access Control - Multiple Vulnerabilities Date: ===== 2011-11-08 References: =========== 2011/Q3-4 URL: http://vulnerability-lab.com/getcontent.php?id=104 VL-ID: ===== 104 Introduction: ============= Each iGuard Biometric / Smart Card Security Appliance has a built-...

iGuard Biometric Access Control - Multiple Vulnerabilities

Document Title: =============== iGuard Biometric Access Control - Multiple Vulnerabilities References Source: ==================== 2011/Q3-4 Release Date: ============= 2011-11-08 Vulnerability Laboratory ID VL-ID: ==================================== 104 Product & Service Introduction:...

Immunity Canvas: JAVA_RHINO

Name| javarhino ---|--- CVE| CVE-2011-3544 Exploit Pack| CANVAS Description| javarhino Notes| CVE Name: CVE-2011-3544 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/76500 Repeatability: Infinite client side - no crash References: http://schierlm.users.sourceforge.net/CVE-2011-3544.html CVE Url:...

SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969)

SEC Consult Vulnerability Lab Security Advisory 20111012-0 ======================================================================= title: Client-side remote file upload & command execution product: Microsoft Forefront Unified Access Gateway Remote Access Agent signed Java applet vulnerable versio...

Microsoft Publisher 2007 Pubconv.dll Memory Corruption

Core Security Technologies - Corelabs Advisory Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106 Advisory URL:...

ExploitHub Offering Bounties – And Residuals – for Exploits

NSS Labs’ announced today that their penetration-testing site, Exploithub, will be offering bounties to researchers for developing exploits for12 high-value vulnerabilities. Exploithub is putting up $4,400 for working exploits against what the company describes as a “dirty dozen” of client-side...

OpenSSH < 4.5 Multiple Vulnerabilities

According to its banner, the remote host is running a version of OpenSSH prior to 4.5. Versions before 4.5 are affected by the following vulnerabilities : - A client-side NULL pointer dereference, caused by a protocol error from a malicious server, which could cause the client to crash...