8869 matches found
eFront Community++ 3.6.10 - SQL Injection / Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/51973/info eFront Community++ is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to compromise the...
eFront Community++ v3.6.10 - Multiple Web Vulnerabilities
Title: ====== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities Date: ===== 2012-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=421 VL-ID: ===== 421 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutio...
eFront Community++ v3.6.10 - SQL Injection Vulnerability
Document Title: =============== eFront Community++ v3.6.10 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=422 Release Date: ============= 2012-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 42...
eFront Community++ v3.6.10 - SQL Injection Vulnerability
Document Title: =============== eFront Community++ v3.6.10 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=422 Release Date: ============= 2012-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 42...
eFront Community++ 3.6.10 Cross Site Scripting
Title: ====== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities Date: ===== 2012-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=421 VL-ID: ===== 421 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutio...
How Offensive Research Drives Down the Cost of Attacks
CANCUN–The offensive security research community has evolved in the last decade or so from a relatively small and insular group inwardly focused, to a large and rather vocal group with a wide variety of motives, opinions and skill levels. But, to hear Brad Arkin of Adobe tell it, the huge amount ...
eFront Community++ v3.6.10 - Multiple Web Vulnerabilities
Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...
eFront Community++ v3.6.10 - Multiple Web Vulnerabilities
Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...
Citadel Malware Authors Adopt Open-Source Development Model
Attackers and malware authors are well-known for their proclivity for taking whatever tactics and techniques work for others and making them their own. That adaptive ability has now extended to the idea of open-source projects, with one malware gang having set up its own community for improving a...
eFronts Community++ 3.6.10 Cross Site Scripting
Title: ====== eFronts Community++ v3.6.10 - Cross Site Vulnerability Date: ===== 2012-02-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=423 VL-ID: ===== 423 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutions...
eFront Community++ v3.6.10 - Cross Site Vulnerability
Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...
eFront Community++ v3.6.10 - Cross Site Vulnerability
Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...
Google Begins Security Review Process for Android Apps
After a couple of years of seeing headlines announcing a steady stream of pieces of malware and trojaned apps appearing the Android Market, Google finally has taken steps to find and remove malicious apps from the market automatically. The company has unveiled a service called Bouncer that scans...
Opera 11.60 Array Integer Overflow
CAL-2012-0004 opera array integer overflow 1 Affected Products ================= 11.60 and prior 2 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a integer overflow vulnerability in array functions like Int32Array,Int16Array... . Opear vendor sa...
PlayStation Network Chief Leaves Sony After 17-Year Run
Susan Panico, the head of Sony’s PlayStation Network PSN, has left that company, according to a report from Venture Beat. Panico’s tenure as head of the PSN was reportedly marked by vast growth, but was marred in the last year by a series of missteps, including the May, 2011 data breach affecting...
Lead Capture Page System Cross Site Scripting
================================================================================= Web : ashiyane.org e-mail : HashoR DOT BlackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ================================================================================...
Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities
Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51597/info Syneto Unified Threat Management is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properl...
Gamers Seek Beta Versions, Download Malware Instead
Tracking the increasingly common use of PC games as an infection vector, researchers at the Microsoft Malware Protection Center MMPC discovered a couple of malicious programs making the rounds on torrent and file sharing sites. Social engineers are disguising their malware by labeling it as the...
Cyber Security Fraud in the Banking Industry: Lessons Learned in OCC Examiner Training
In late October 2011, Coalfire participated in a day of IT audit training with about 35 bank examiners. As you would expect, we covered a lot of previously hot topics. The conversation changed as we started talking about the amount of fraud being realized by community banks and credit unions...
2011: Wait, What?
The security industry can be a giant repetitive, follow-the-loser echo chamber of unoriginal thoughts, familiar flaws and copycat theories. But if ever there was a year in which folks could stand back and look at what’s gone on and say, what in the hell just happened, 2011 was it. So rather than...