Novell Netware - XNFS.NLM STAT Notify Remote Code Execution

Novell Netware - XNFS.NLM STAT Notify Remote Code Execution Application: Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-07 PRL: 2012-01 Author: Francis...

eFront Enterprise 3.6.10 Directory Traversal

Title: ====== eFront Enterprise v3.6.10 - File Include Vulnerability Date: ===== 2012-01-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=296 VL-ID: ===== 296 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutions fo...

FlipDot HackerSpace Kassel - 2011 StartUP Slides

Document Title: =============== FlipDot HackerSpace Kassel - 2011 StartUP Slides References: =========== Download: http://www.vulnerability-lab.com/resources/videos/374.flv View: http://www.youtube.com/watch?v=yOBjGFLArdU Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID:...

Analysis Challenges Stuxnet Origins Story, Suggests Links to Duqu and Other Malware

An ongoing analysis of the Duqu malware by researchers at Kaspersky Lab finds many links between the two pieces of malicious code and casts doubt on the conventional wisdom about Stuxnet’s origins. An analysis of software drivers used by both Stuxnet and the later Duqu malware has found that the...

Facebook Global Football - SQL Injection Vulnerability

Document Title: =============== Facebook Global Football - SQL Injection Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=339 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 339 Comm...

PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection

No description provided by source. Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November...

C Market 1.1 Cross Site Scripting

Title: ====== FBC Market v1.1 - Cross Site Scripting Vulnerability Date: ===== 2011-12-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=364 VL-ID: ===== 364 Introduction: ============= FBC-Market is a application that allows you to run your own online marketplace or...

ImageShack Service - Cross Site Scripting Vulnerability

Document Title: =============== ImageShack Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=352 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== 352...

ImageShack Service Cross Site Scripting

Title: ====== ImageShack Service - Cross Site Scripting Vulnerability Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=352 VL-ID: ===== 352 Introduction: ============= ImageShack is a free image hosting website. ImageShack has a subscription servic...

Bundesregierung Website Cross Site Scripting

Title: ====== Bundesregierung Website - Cross Site Scripting Vulnerability Date: ===== 2011-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=346 VL-ID: ===== 346 Introduction: ============= Der Government Site Builder GSB wurde als zentrale Content-Management-Lösun...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Control Center 620 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=32 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== ...

Kaspersky Internet Security / Anti-Virus 2011 / 2012 Memory Corruption

Title: ====== Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability Date: ===== 2011-12-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=129 VL-ID: ===== 129 Introduction: ============= Kaspersky Internet Security 2011 has everything that you need to stay safe and...

PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23058 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November 2011...

CertificationMagazine Blind SQL Injection

Title: ====== CertificationMagazine - Blind SQL Injection Vulnerability Date: ===== 2011-12-19 VL-ID: ===== 269 Reference: ========== http://www.vulnerability-lab.com/getcontent.php?id=269 Introduction: ============= Certification Magazine is a technical training and certification publication...

Facebook JuniorsCheesecakeFoxwoods - SQL Vulnerability

Document Title: =============== Facebook JuniorsCheesecakeFoxwoods - SQL Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=338 Release Date: ============= 2011-12-20 Vulnerability Laboratory ID VL-ID: ==================================== 338...

IrfanView FlashPix PlugIn - Double-Free

Application: IrfanView FlashPix PlugIn Double-Free Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47322 PRL: 2011-11 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Timeli...

appRain CMF v0.1.5 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications appRain CMF v0.1.5 - Multiple Web Vulnerabilities Introduction: ============= appRain is one of the first officially released Opensource Content Management Framework CMF. CMF is a new web engineering concept where CMS Content Management System...

Kaspersky IS&AV 2012 - Memory Corruption Vulnerability

Document Title: =============== Kaspersky IS&AV 2012 - Memory Corruption Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/19.wmv View: http://www.youtube.com/watch?v=BF8SkTDelZM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=129...

Facebook Fit-ify! SQL Injection

Title: ====== Facebook Fit-ify! - SQL Injection Vulnerability Date: ===== 2011-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=337 VL-ID: ===== 337 Introduction: ============= The application is currently included and viewable by all facebook users. The service is...

appRain CMF 0.1.5 Cross Site Scripting / SQL Injection

Title: ====== appRain CMF v0.1.5 - Multiple Web Vulnerabilities Date: ===== 2011-12-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=362 VL-ID: ===== 362 Introduction: ============= appRain is one of the first officially released Opensource Content Management Framewor...