PostBank Online Banking - Non Persistent XSS Vulnerability

Document Title: =============== PostBank Online Banking - Non Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=139 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

Multiple vulnerabilities in LEPTON

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LEPTON, which can be exploited to perform Local File Inclusion, Cross Site Scripting and SQL Injection attacks. 1 Local File Inclusion in LEPTON: CVE-2012-0998 Input passed via the "language" POST parameter to...

PostBank Online Banking - Non Persistent XSS Vulnerability

Document Title: =============== PostBank Online Banking - Non Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=139 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

Verkehrsbetrieb - SQL Injection Vulnerability

Document Title: =============== Verkehrsbetrieb - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=138 Release Date: ============= 2012-01-24 Vulnerability Laboratory ID VL-ID: ==================================== 138 Product &...

SpamTitan Application 5.08x - SQL Injection

SpamTitan Application 5.08x - SQL Injection Title: ====== SpamTitan Application v5.08x - SQL Injection Vulnerability Date: ===== 2012-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=197 VL-ID: ===== 197 Introduction: ============= SpamTitan Anti Spam is a complete...

Opera Website - Cross Site Scripting Vulnerability

Document Title: =============== Opera Website - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=369 Release Date: ============= 2012-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 369 Comm...

Opera Website - Cross Site Scripting Vulnerability

Document Title: =============== Opera Website - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=369 Release Date: ============= 2012-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 369 Comm...

SpamTitan Application v5.08x - SQL Injection Vulnerability

Document Title: =============== SpamTitan Application v5.08x - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=197 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020020 ID: CNNVD-201202-020 Release Date: =============...

Zone Rouge CMS 2012 - SQL Injection Vulnerability

Document Title: =============== Zone Rouge CMS 2012 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=391 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 391 Produ...

RheinMetall AG SQL Injection

Title: ====== RheinMetall AG - Multiple SQL Injection Vulnerabilities Date: ===== 2012-01-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=170 VL-ID: ===== 170 Introduction: ============= - UK Rheinmetall AG is a German automotive and defence company with factories in...

Enter at your own Risk [THN] - eZine Issue 008

Document Title: =============== Enter at your own Risk THN - eZine Issue 008 References: =========== Mirror: http://www.vulnerability-lab.com/resources/documents/389.pdf Article: http://www.vulnerability-lab.com/getcontent.php?id=389 Release Date: ============= 2012-01-19 Vulnerability Laboratory...

OneOrZero AIMS 2.8.0 Trial Build 231211 Cross Site Scripting

Advisory ID: HTB23066 Reference: https://www.htbridge.ch/advisory/xssinoneorzeroaims.html Product: OneOrZero AIMS Vendor: www.oneorzero.com http://www.oneorzero.com/ Vulnerable Version: 2.8.0 Trial build231211 and probably prior Tested Version: 2.8.0 Trial build231211 Vendor Notification: 28...

HITB2011KUL - Is The Pen Still Mightier Than The Sword

Document Title: =============== HITB2011KUL - Is The Pen Still Mightier Than The Sword References: =========== Download: http://www.vulnerability-lab.com/resources/videos/385.wmv View: http://www.youtube.com/watch?v=9dsYYZl4sk Release Date: ============= 2012-01-17 Vulnerability Laboratory ID...

RheinMetall AG - Multiple SQL Injection Vulnerabilities

Document Title: =============== RheinMetall AG - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=170 Release Date: ============= 2012-01-17 Vulnerability Laboratory ID VL-ID: ==================================== 170...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an open source project which combines groupware and CRM in one...

KnowledgeTree 3.7.0.2 Cross Site Scripting

Advisory ID: HTB23065 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinknowledgetreecommunityedition.html Product: KnowledgeTree Commercial and Community Editions Vendor: KnowledgeTree Inc. http://knowledgetree.org Vulnerable Version: 3.7.0.2 and probably prior Tested Version:...

Tine v2.0 Maischa - Cross Site Scripting Vulnerability

Document Title: =============== Tine v2.0 Maischa - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=379 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 379...

Virtualization: Threats and Protections For SMBs

Join Paul Roberts, Threatpost editor, and his guests, Michael Guigli, CEO of CloudConnect and Tim Armstrong, Malware Researcher at Kaspersky Lab as they discuss Virtualization and the security challenges faced by small businesses. To access your show page for the Threatpost Now! Series, please...

ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-007 January 5, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors: Novell - --...