eFronts Community++ v3.6.10 - Cross Site Vulnerability

Title: ====== eFronts Community++ v3.6.10 - Cross Site Vulnerability Date: ===== 2012-02-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=423 VL-ID: ===== 423 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutions...

Bart`s CMS - SQL Injection Vulnerability

Title: ====== Barts CMS - SQL Injection Vulnerability Date: ===== 2012-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=390 VL-ID: ===== 390 Introduction: ============= It is a website Content Management System that is build with Codecharge Studio. There will also ...

Multiple vulnerabilities in ZENphoto

Advisory ID: HTB23070 Product: ZENphoto Vendor: www.zenphoto.org Vulnerable Version: 1.4.2 and probably prior Tested Version: 1.4.2 Vendor Notification: 18 January 2012 Vendor Patch: 19 January 2012 Public Disclosure: 8 February 2012 Vulnerability Type: PHP Code Execution, SQL Injection, XSS...

eFront Community++ 3.6.10 SQL Injection

Title: ====== eFront Community++ v3.6.10 - SQL Injection Vulnerability Date: ===== 2012-02-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=422 VL-ID: ===== 422 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solution...

eFront Community++ v3.6.10 - SQL Injection Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=422 Release Date: ============= 2012-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 42...

Valery Boronin and Vera Trubacheva

In a presentation on the second day, “Humans Are the Weakest Link,” Valery Boronin, Director DLP Research, R&D at Kaspersky Lab and Vera Trubacheva, a System Analyst at Kaspersky Lab, put DLP 1.0 or at least a small stuffed animal on trial, so to speak. Underscoring that when it comes down to it,...

Fabio Assolini

At one point during his talk on the conference’s second day, Kaspersky Lab researcher Fabio Assolini shows video of criminals affixing card skimming devices in broad daylight, in the presence of other bank customers. Assolini’s talk was on this so-called “Chupacabra malware,” and how the skimmers...

Cancun, Mexico

At Kaspersky Lab’s Security Analyst Summit last week, over 100 researchers and law enforcement officials converged in Cancun, Mexico over the course of five days to network and discuss a veritable cornucopia of security topics. Topics such as privacy, SCADA and PLC security, tracking cybercrimina...

SciTools Understand 2.6 (wintab32.dll) DLL Loading Arbitrary Code Execution

Summary Understand is a static analysis tool for maintaining, measuring, and analyzing critical or large code bases. Description The vulnerability is caused due to the application loading libraries wintab32.dll in an insecure manner. This can be exploited to load arbitrary libraries by tricking a...

ZENphoto 1.4.2 Code Execution / XSS / SQL Injection

Advisory ID: HTB23070 Product: ZENphoto Vendor: www.zenphoto.org Vulnerable Version: 1.4.2 and probably prior Tested Version: 1.4.2 Vendor Notification: 18 January 2012 Vendor Patch: 19 January 2012 Public Disclosure: 8 February 2012 Vulnerability Type: PHP Code Execution, SQL Injection, XSS...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...

Cyberoam Central Console v2.x - File Include Vulnerability

Document Title: =============== Cyberoam Central Console v2.x - File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/411.wmv View: http://www.youtube.com/watch?v=pGJy2XNugy8 Release Date: ============= 2012-02-07 Vulnerability Laboratory I...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...

eFronts Community++ 3.6.10 Cross Site Scripting

Title: ====== eFronts Community++ v3.6.10 - Cross Site Vulnerability Date: ===== 2012-02-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=423 VL-ID: ===== 423 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutions...

Dinama SMS Service Cross Site Scripting

Title: ====== Dinama SMS Service - Persistent Web Vulnerability Date: ===== 2012-02-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=417 VL-ID: ===== 417 Introduction: ============= Las soluciones de medios interactivos de DINAMA habilitan la comunicación bidirecciona...

Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=428 Release Date: ============= 2012-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 42...

Google Service Reward #1 - ClickJacking Vulnerability

Document Title: =============== Google Service Reward 1 - ClickJacking Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/416.wmv View: http://www.youtube.com/watch?v=6N0YS9cTRHw Release Date: ============= 2012-02-06 Vulnerability Laboratory ID VL-I...

HITB2011KUL - Mobile Malware Analysis

Document Title: =============== HITB2011KUL - Mobile Malware Analysis References: =========== Download: http://www.vulnerability-lab.com/resources/videos/424.wmv View: http://www.youtube.com/watch?v=nVAuZ7jf7Sk Release Date: ============= 2012-02-05 Vulnerability Laboratory ID VL-ID:...

OSCommerce 3.0.2 Cross Site Scripting

Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Public License. It features a rich set o...

Facebook Game Store - SQL Injection Vulnerability

Document Title: =============== Facebook Game Store - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=408 Release Date: ============= 2012-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 408 Produ...