EPS Viewer Buffer Overflow Vulnerability

Core Security Technologies Advisory - EPS Viewer is prone to a security vulnerability when processing EPS files. This vulnerability could be exploited by a remote attacker to execute arbitrary code on the target machine by enticing EPS Viewer users to open a specially crafted EPS file client-side...

EPS Viewer Buffer Overflow Vulnerability

1. Advisory Information Title: EPS Viewer Buffer Overflow Vulnerability Advisory ID: CORE-2013-0808 Advisory URL:http://www.coresecurity.com/core-labs/advisories/eps-viewer-buffer-overflow-vulnerability Date published: 2013-08-28 Date of last update: 2013-08-28 Vendors contacted: EPS Viewer Team...

Aloaha PDF Suite Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-0805 1. Advisory Information Title: Aloaha PDF Suite Buffer Overflow Vulnerability Advisory ID: CORE-2013-0805 Advisory URL:http://www.coresecurity.com/advisories/aloaha-pdf-suite-buffer-overflow-vulnerability Date published: 2013-08-28 Date of last update:...

11 Firefox Add-ons to Hack and PenTest

1. Tamper Data Tamper data is an great tool to to view and modify HTTP/HTTPS headers and post parameters. We can alter each request going from our machine to destination host with this. Thus it helps in security testing web application by modifying POST parameters. It can be used in performing XS...

xml2 Fuzzer 1.0 exploit

xml2 Fuzzer is a fuzzing utility that daemonizes in order to fuzz the client side of a web browser. / xml2 fuzz ver 1.0 -- C:\x90c\xml2fuzz ./xmlfuzz / \ / \ | || | | | \ / / . || | | | / | include include define FUZZDAEMONPORT 9090 / fuzz type / define AAAAFUZZ 1 define NUMERICFUZZ 2 static char...

Fedora 18 : subversion-1.7.11-1.fc18.1 (2013-13672)

This update includes the latest release of Apache Subversion 1.7, version 1.7.11. Several security vulnerabilities are fixed in this update : Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If...

[Raft v3.0.1] Response Analysis and Further Testing Tool

Not an inspection proxy RAFT is a testing tool for the identification of vulnerabilities in web applications. RAFT is a suite of tools that utilize common shared elements to make testing and analysis easier. The tool provides visibility in to areas that other tools do not such as various client...

JeeCMS任意用户密码找回漏洞

简要描述： 请不要在客户端验证找回密码所用邮箱或手机号 详细说明： https://images.seebug.or...

http-dombased-xss NSE Script

It looks for places where attacker-controlled information in the DOM may be used to affect JavaScript execution in certain ways. The attack is explained here: See also: http-stored-xss.nse http-phpself-xss.nse http-xssed.nse http-unsafe-output-escaping.nse Script Arguments...

Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability

Title: ====== Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability Date: ===== 2013-07-20 References: =========== http://vulnerability-lab.com/getcontent.php?id=775 BARRACUDA NETWORK SECURITY ID: BNSEC-723 VL-ID: ===== 775 Common Vulnerability Scoring System:...

Microsoft EPD - CS Flash Cross Site Web Vulnerability

Document Title: =============== Microsoft EPD - CS Flash Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Microsoft Security Response Center MSRC ID: 15156 Release Date: ============= 2013-07-28 Vulnerability Laboratory I...

Microsoft EPD - CS Flash Cross Site Web Vulnerability

Document Title: =============== Microsoft EPD - CS Flash Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Microsoft Security Response Center MSRC ID: 15156 Release Date: ============= 2013-07-28 Vulnerability Laboratory I...

Open Source Steganography Web Service: DarkJPEG

DarkJPEG is a new generation open source steganography web service. It is supposed to serve people’s needs for the freedom of communication even in those countries which break human rights by forcing some kind of Internet censorship or even denying to use cryptography by law. The service uses...

Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities (Bug Bounty #17)

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities Bug Bounty 17 Date: ===== 2013-07-17 References: =========== http://vulnerability-lab.com/getcontent.php?id=779 BARRACUDA NETWORK SECURITY ID: BNSEC-815 VL-ID: ===== 779 Common Vulnerability Scoring System...

Barracuda CudaTel 2.6.02.04 Cross Site Scripting

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities Bug Bounty 17 Date: ===== 2013-07-17 References: =========== http://vulnerability-lab.com/getcontent.php?id=779 BARRACUDA NETWORK SECURITY ID: BNSEC-815 VL-ID: ===== 779 Common Vulnerability Scoring System...

Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability

Title: ====== Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability Date: ===== 2013-07-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 VL-ID: ===== 776 Common Vulnerability Scoring System:...

Barracuda CudaTel 2.6.02.040 Cross Site Scripting

Title: ====== Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability Date: ===== 2013-07-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 VL-ID: ===== 776 Common Vulnerability Scoring System:...

Barracuda CudaTel 2.6.02.04 - CS Cross Site Vulnerabilities

Document Title: =============== Barracuda CudaTel 2.6.02.04 - CS Cross Site Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=779 BARRACUDA NETWORK SECURITY ID: BNSEC-815 Release Date: ============= 2013-07-16 Vulnerability Laboratory ID VL-ID:...

Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 Release Date: ============= 2013-07-14 Vulnerability Laboratory ID...

Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 Release Date: ============= 2013-07-14 Vulnerability Laboratory ID...