Multiple WebGL crashes — Mozilla

Mozilla security researcher Christoph Diehl reported two crashes in WebGL code. One crash was the result of an out-of-bounds read and could be used to read data from other processes who had stored data in the GPU. The severity of this issue was determined to be high. The second crash was the resu...

EA Sports Cross Site Scripting

Information -------------------- Name : XSS Persistent in EA Sports Software : EA Sports Main site Vendor Homepage : http://www.ea.com Vulnerability Type : XSS Persistent Severity : Very High Researcher : Juan Sacco Description ------------------ EA Sports is prone to a XSS Stored vulnerability...

Electronic JukeBox - Hardware Hacking Part 1 & 2

Document Title: =============== Electronic JukeBox - Hardware Hacking Part 1 & 2 References: =========== View Part1: http://www.youtube.com/watch?v=0rTiXldgeW4 View Part2: http://www.youtube.com/watch?v=dAX4p1oMTtw Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID:...

Forumer & IPB Board - Remote SQL Injection Vulnerability

Document Title: =============== Forumer & IPB Board - Remote SQL Injection Vulnerability Release Date: ============= 2011-06-20 Vulnerability Laboratory ID VL-ID: ==================================== 199 Abstract Advisory Information: ============================== linc0ln.dll detected a SQL...

flatfiler ONE rc2 - Multiple Web Vulnerabilities

Document Title: =============== flatfiler ONE rc2 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-13 Vulnerability Laboratory ID VL-ID: ==================================== 56 Abstract Advisory Information: ============================== An anonymous researcher discovered...

flatfiler ONE rc2 - Multiple Web Vulnerabilities

Document Title: =============== flatfiler ONE rc2 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-13 Vulnerability Laboratory ID VL-ID: ==================================== 56 Abstract Advisory Information: ============================== An anonymous researcher discovered...

Apache Archiva 1.3.4 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

Imperva SecureSphere SQL Injection Filter Bypass

======================================================================= Imperva SecureSphere - SQL injection filter bypass ======================================================================= Affected Software : SecureSphere Web Application Firewall WAF Severity : High Local/Remote : Remote...

Google Fixes More Than 25 Bugs in Chrome, Pays $16,500 in Bounties

Google has released another new version of Chrome that fixes a total of 27 different bugs on various platforms. The company paid out $16,500 in bounties to researchers for the vulnerabilities they reported, including one $3,000 payment for a high-severity bug. The new version of Chrome, version...

Tracks 1.7.2 Cross Site Scripting

Information -------------------- Name : XSS vulnerability in Tracks Software : Tracks 1.7.2. Vendor Hompeage : http://getontracks.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-003 Description ------------------ Tracks is a...

HTTP header leakage when using Opera Turbo – Opera Security Advisories

HTTP header leakage when using Opera Turbo – Opera Security Advisories OPCOM Team | February 11, 2011 Severity High Description When using Opera Turbo, pages are requested by the Opera Turbo servers, sending the relevant HTTP headers for that request. In some cases, the headers are incorrectly...

Linksys WAP610N - Root Access Security

Linksys WAP610N - Root Access Security Secure Network - Security Research Advisory Vuln name: Linksys WAP610N Unauthenticated Access With Root Privileges Systems affected: WAP610N Firmware Version: 1.0.01 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL:...

Linksys WAP610N Unauthenticated Access With Root Privileges

Secure Network - Security Research Advisory Vuln name: Linksys WAP610N Unauthenticated Access With Root Privileges Systems affected: WAP610N Firmware Version: 1.0.01 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL: http://www.linksysbycisco.com Authors: Matteo Ignaccolo...

Openfire 3.6.4 Multiple CSRF Vulnerabilities

Exploit for jsp platform in category web applications Project: Openfire Severity: High Versions: 3.6.4 other versions may be affected Exploit type: Multiple CSRF Fixes Available: None ------------------------------------------------------------------------...

CVE-2010-4581

Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."...

Design/Logic Flaw

Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."...

CVE-2010-4581

Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."...

Mitel AWC - Command Execution

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-14 PR10-14 Unauthenticated command execution within Mitel's AWC Mitel Audio and Web Conferencing Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Wednesday, 21 July 2010 Vendor informed: Monday, 26 July...

Elcom CommunityManager.NET Auth Bypass Vulnerability

Exploit for asp platform in category web applications Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET...

Elcom CommunityManager.NET - Authentication Bypass

Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET Affected versions. v6.7 verified and possibly others...