Cross-site Scripting (XSS) Vulnerabilities in GBook PHP guestbook

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in GBook PHP guestbook which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in GBook PHP guestbook The vulnerability exists due to input sanitation error in th...

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability

Summary ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty of codecs, and it's prepared to download more if needed. Description The vulnerability is caused due to a boundary error in the processing of a playlist file , which can be exploited to cause a stack-bas...

Click&Email - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...

Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method

Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...

Click&Rank - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Rank - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 220 Product & Service Introduction: =============================== While adding a TOP-List or TOP-Sit...

Click&Rank - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Rank - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 220 Product & Service Introduction: =============================== While adding a TOP-List or TOP-Sit...

Hepi.pl CMS v2011 - SQL Injection Vulnerability

Document Title: =============== Hepi.pl CMS v2011 - SQL Injection Vulnerability Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 216 Product & Service Introduction: =============================== http://hepi.pl/ Abstract Advisory...

Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 218 Product & Service Introduction: =============================== Click&BaneX is a full...

SQL Injection Vulnerability in Google Lab Database System

SQL Injection Vulnerability in Google Lab Database System Very Big & Critical Vulnerability detected in Google Lab System. Vendor is already reported by hackers, But they don't take positive step in this case, so finally hackers exposed the vulnerability in public by Bangladesh Cyber Army Admin -...

SQL Injection Vulnerability in Google Lab Database System

SQL Injection Vulnerability in Google Lab Database System Very Big & Critical Vulnerability detected in Google Lab System. Vendor is already reported by hackers, But they don't take positive step in this case, so finally hackers exposed the vulnerability in public by Bangladesh Cyber Army Admin -...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...

IW Newsletter v3.5 - Remote SQL Injection Vulnerability

Document Title: =============== IW Newsletter v3.5 - Remote SQL Injection Vulnerability Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 210 Product & Service Introduction: =============================== Interamente sviluppato in ASP,...

CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities

Document Title: =============== CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities Release Date: ============= 2011-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 133 Product & Service Introduction: =============================== CartStore is a sophisticated...

Interview VZ Technocrate - Cyberwar & Activities 2011

Document Title: =============== Interview VZ Technocrate - Cyberwar & Activities 2011 References: =========== View: http://www.youtube.com/watch?v=qNUNZP8Rpfk Download: http://www.vulnerability-lab.com/resources/iv-07-technocrate.mp3 Release Date: ============= 2011-06-26 Vulnerability Laboratory...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-5.0-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. For...

NetServe Web Server v1.0.58 Multiple Remote Vulnerabilities

Summary NetServe is a super compact Web Server and File Sharing application for Windows NT, 95, 98, 2000, and XP. It's HTTP Web Server can serve all types of files including html, gif and jpeg, actually any files placed in your NetServe directory can be served. New key features include...

Sitemagic CMS 2010.04.17 Cross Site Scripting

Sitemagic CMS 2010.04.17 SMExt Remote Cross-Site Scripting Vulnerability Vendor: Sitemagic CMS Product web page: http://www.sitemagic.org Affected version: 2010.04.17 Summary: Sitemagic CMS is a fantastic new platform for building and maintaining great looking websites. It is very easy to set up...

Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability

Document Title: =============== Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID: ==================================== 94 Product & Service Introduction: =============================== Ever since we released our ve...

Sitemagic CMS 2010.04.17 (SMExt) Remote Cross-Site Scripting Vulnerability

Summary Sitemagic CMS is a fantastic new platform for building and maintaining great looking websites. It is very easy to set up and use, and is fully extendable and customizable. Description Sitemagic CMS suffers from a XSS vulnerability when parsing user input to the 'SMExt' parameter via GET...