C Market 1.1 Cross Site Scripting

Title: ====== FBC Market v1.1 - Cross Site Scripting Vulnerability Date: ===== 2011-12-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=364 VL-ID: ===== 364 Introduction: ============= FBC-Market is a application that allows you to run your own online marketplace or...

ImageShack Service - Cross Site Scripting Vulnerability

Document Title: =============== ImageShack Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=352 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== 352...

ImageShack Service Cross Site Scripting

Title: ====== ImageShack Service - Cross Site Scripting Vulnerability Date: ===== 2011-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=352 VL-ID: ===== 352 Introduction: ============= ImageShack is a free image hosting website. ImageShack has a subscription servic...

Barracuda Control Center 620 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Control Center 620 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=32 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== ...

Kaspersky Internet Security / Anti-Virus 2011 / 2012 Memory Corruption

Title: ====== Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability Date: ===== 2011-12-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=129 VL-ID: ===== 129 Introduction: ============= Kaspersky Internet Security 2011 has everything that you need to stay safe and...

CertificationMagazine Blind SQL Injection

Title: ====== CertificationMagazine - Blind SQL Injection Vulnerability Date: ===== 2011-12-19 VL-ID: ===== 269 Reference: ========== http://www.vulnerability-lab.com/getcontent.php?id=269 Introduction: ============= Certification Magazine is a technical training and certification publication...

PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23058 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November 2011...

IrfanView FlashPix PlugIn - Double-Free

Application: IrfanView FlashPix PlugIn Double-Free Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47322 PRL: 2011-11 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Timeli...

Facebook JuniorsCheesecakeFoxwoods - SQL Vulnerability

Document Title: =============== Facebook JuniorsCheesecakeFoxwoods - SQL Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=338 Release Date: ============= 2011-12-20 Vulnerability Laboratory ID VL-ID: ==================================== 338...

Kaspersky IS&AV 2012 - Memory Corruption Vulnerability

Document Title: =============== Kaspersky IS&AV 2012 - Memory Corruption Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/19.wmv View: http://www.youtube.com/watch?v=BF8SkTDelZM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=129...

appRain CMF v0.1.5 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications appRain CMF v0.1.5 - Multiple Web Vulnerabilities Introduction: ============= appRain is one of the first officially released Opensource Content Management Framework CMF. CMF is a new web engineering concept where CMS Content Management System...

appRain CMF 0.1.5 Cross Site Scripting / SQL Injection

Title: ====== appRain CMF v0.1.5 - Multiple Web Vulnerabilities Date: ===== 2011-12-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=362 VL-ID: ===== 362 Introduction: ============= appRain is one of the first officially released Opensource Content Management Framewor...

Facebook Fit-ify! SQL Injection

Title: ====== Facebook Fit-ify! - SQL Injection Vulnerability Date: ===== 2011-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=337 VL-ID: ===== 337 Introduction: ============= The application is currently included and viewable by all facebook users. The service is...

appRain CMF v0.1.5 - Multiple Web Vulnerabilities

Document Title: =============== appRain CMF v0.1.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=362 Release Date: ============= 2011-12-17 Vulnerability Laboratory ID VL-ID: ==================================== 362 Produ...

Facebook Fit-ify! - SQL Injection Vulnerability

Document Title: =============== Facebook Fit-ify! - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=337 Release Date: ============= 2011-12-17 Vulnerability Laboratory ID VL-ID: ==================================== 337 Common...

Building Knight Rider Mode - Jalousien Remote Concert

Document Title: =============== Building Knight Rider Mode - Jalousien Remote Concert References: =========== Download: http://www.vulnerability-lab.com/resources/videos/359.wmv View: http://www.youtube.com/watch?v=bxjTgUaF40w Release Date: ============= 2011-12-15 Vulnerability Laboratory ID...

Multiple vulnerabilities in ImpressCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ImpressCMS, which can be exploited to perform cross-site scripting and local file inclusion attacks. 1 Multiple Arbitrary XSS vulnerabilities in ImpressCMS: CVE-2012-0986 1.1 Input appended to the URL after...

How to log in to the Linux Helper Appliance

Purpose This article documents how to login to the Linux appliance used by Veeam Backup & Replication. This is not a common need, but may be neccesary for troubleshooting or advanced configuration. Linux appliances are used by Veeam Backup & Replication for several purposes: In Surebackup, the...

Removing CarrierIQ Is A Really Bad Idea For Most Mobile Phone Users

The controversy over stealthy monitoring software by CarrierIQ has raised important questions about user privacy and business ethics in the Brave New World of smart phones, tablets and the like. In the uproar over CarrierIQ’s surreptitious monitoring of mobile phone users, various tools have...

Multiple XSS vulnerabilities in XOOPS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in XOOPS, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Multiple Cross-Site Scripting XSS in XOOPS: CVE-2012-0984 1.1 Input passed via the "touserid" POST parameter to /modules/pm/pmlite.php ...