Zone Rouge CMS 2012 - SQL Injection Vulnerability

Document Title: =============== Zone Rouge CMS 2012 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=391 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 391 Produ...

Enter at your own Risk [THN] - eZine Issue 008

Document Title: =============== Enter at your own Risk THN - eZine Issue 008 References: =========== Mirror: http://www.vulnerability-lab.com/resources/documents/389.pdf Article: http://www.vulnerability-lab.com/getcontent.php?id=389 Release Date: ============= 2012-01-19 Vulnerability Laboratory...

OneOrZero AIMS 2.8.0 Trial Build 231211 Cross Site Scripting

Advisory ID: HTB23066 Reference: https://www.htbridge.ch/advisory/xssinoneorzeroaims.html Product: OneOrZero AIMS Vendor: www.oneorzero.com http://www.oneorzero.com/ Vulnerable Version: 2.8.0 Trial build231211 and probably prior Tested Version: 2.8.0 Trial build231211 Vendor Notification: 28...

RheinMetall AG - Multiple SQL Injection Vulnerabilities

Document Title: =============== RheinMetall AG - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=170 Release Date: ============= 2012-01-17 Vulnerability Laboratory ID VL-ID: ==================================== 170...

HITB2011KUL - Is The Pen Still Mightier Than The Sword

Document Title: =============== HITB2011KUL - Is The Pen Still Mightier Than The Sword References: =========== Download: http://www.vulnerability-lab.com/resources/videos/385.wmv View: http://www.youtube.com/watch?v=9dsYYZl4sk Release Date: ============= 2012-01-17 Vulnerability Laboratory ID...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an open source project which combines groupware and CRM in one...

Tine v2.0 Maischa - Cross Site Scripting Vulnerability

Document Title: =============== Tine v2.0 Maischa - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=379 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 379...

KnowledgeTree 3.7.0.2 Cross Site Scripting

Advisory ID: HTB23065 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinknowledgetreecommunityedition.html Product: KnowledgeTree Commercial and Community Editions Vendor: KnowledgeTree Inc. http://knowledgetree.org Vulnerable Version: 3.7.0.2 and probably prior Tested Version:...

Virtualization: Threats and Protections For SMBs

Join Paul Roberts, Threatpost editor, and his guests, Michael Guigli, CEO of CloudConnect and Tim Armstrong, Malware Researcher at Kaspersky Lab as they discuss Virtualization and the security challenges faced by small businesses. To access your show page for the Threatpost Now! Series, please...

ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-007 January 5, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors: Novell - --...

Novell Netware - XNFS.NLM STAT Notify Remote Code Execution

Novell Netware - XNFS.NLM STAT Notify Remote Code Execution Application: Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-07 PRL: 2012-01 Author: Francis...

eFront Enterprise 3.6.10 Directory Traversal

Title: ====== eFront Enterprise v3.6.10 - File Include Vulnerability Date: ===== 2012-01-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=296 VL-ID: ===== 296 Introduction: ============= Tailored with larger organizations in mind, eFront Enterprise offers solutions fo...

FlipDot HackerSpace Kassel - 2011 StartUP Slides

Document Title: =============== FlipDot HackerSpace Kassel - 2011 StartUP Slides References: =========== Download: http://www.vulnerability-lab.com/resources/videos/374.flv View: http://www.youtube.com/watch?v=yOBjGFLArdU Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID:...

Analysis Challenges Stuxnet Origins Story, Suggests Links to Duqu and Other Malware

An ongoing analysis of the Duqu malware by researchers at Kaspersky Lab finds many links between the two pieces of malicious code and casts doubt on the conventional wisdom about Stuxnet’s origins. An analysis of software drivers used by both Stuxnet and the later Duqu malware has found that the...

Facebook Global Football - SQL Injection Vulnerability

Document Title: =============== Facebook Global Football - SQL Injection Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=339 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 339 Comm...

ImageShack Service Cross Site Scripting

Title: ====== ImageShack Service - Cross Site Scripting Vulnerability Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=352 VL-ID: ===== 352 Introduction: ============= ImageShack is a free image hosting website. ImageShack has a subscription servic...

Bundesregierung Website Cross Site Scripting

Title: ====== Bundesregierung Website - Cross Site Scripting Vulnerability Date: ===== 2011-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=346 VL-ID: ===== 346 Introduction: ============= Der Government Site Builder GSB wurde als zentrale Content-Management-Lösun...

PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection

No description provided by source. Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Control Center 620 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=32 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== ...