Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

CSWorks LiveData Service vulnerable to denial-of-service (DoS)

Overview LiveData Service, a server component of CSWorks contains a denial-of-service DoS vulnerability. LiveData Service, a server component of CSWorks, contains an issue when processing TCP packets, which may lead to a denial-of-service DoS. Kuang-Chun Hung of Security Research and Service...

XBox Security Chief Says Account Hacks Linked To Phishing, Resale Schemes

In a pattern that is becoming more common, hackers are hijacking XBox Live accounts, then tricking them out with expansion modules and other add-ons before trying to resell them to unwitting third parties. Recent XBox Live account hijacks are most likely the product of phishing and identity theft...

Solaris 8 (x86) : 121431-54

SunOS 5.8x86 5.9x86 5.10x86: Live Upgra. Date this patch was last updated by Sun : Aug/04/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Roundcube Webmail 0.3.1 - Cross-Site Request Forgery SQL Injection

Roundcube Webmail 0.3.1 - Cross-Site Request Forgery SQL Injection Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. "POST" data in...

Roundcube Webmail 0.3.1 - Cross-Site Request Forgery / SQL Injection

Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. "POST" data in http://site.com/roundcube/index.php...

Directory traversal

Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. dot dot in the showlang parameter...

CVE-2010-4858

CVE-2010-4858 is corroborated by multiple connected sources as a local file inclusion (LFI) vulnerability in DNET Live-Stats 0.8, specifically RC8. The issue arises from improper sanitization of user input, enabling directory traversal to access arbitrary files via the showlang parameter, or, per...

Star Develop Live Help 2.0 Disclosure / Bypass

================================================ Star Develop Live Help v2.0 Mullti Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --'...

CVE-2011-3742

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

Information disclosure

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

CVE-2011-3742

CVE-2011-3742 affects HelpCenter Live 2.1.7. The issue is an information disclosure where remote attackers can obtain sensitive data by directly requesting certain PHP files (e.g., modules/HelpCenter/index.php); an error message reveals the installation path. Multiple connected documents (NVD, Re...

CVE-2011-3742

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, whic...

Droidsheep : Android Application for Session Hijacking

Droidsheep : Android Application for Session Hijacking Droidsheep is free alternate of faceniff which is available on download droidsheep website for free. Its one click hijacking tool which supports Amazon.de facebook.com flickr.com twitter.com linkdein.com yahoo.com live.com google.de only the...

XSS Ebuddy (responsible disclosure)

Early this morning, the security group Virtual Luminous published a vulnerability in 'Ebuddy Web Messenger' and we would like to inform you that this vulnerability had been discovered and reported to the vendor on June 5th, 2011 by DcLabs Security Research Group. In the report below you are going...

Adobe Groups Cross Site Scripting

; Exploit Title: Adobe Groups Cross Site Scripting Date: 30.08.2011 Author: Sony Software Link: http://groups.adobe.com/ Blog: http://st2tea.blogspot.com/ .................................................................. Well, we can see: http://xssed.com/mirror/71488/ Don't work and it's...

StarMoney Banking Software - Multiple Vulnerabilities [HD]

Document Title: =============== StarMoney Banking Software - Multiple Vulnerabilities HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-31 Vulnerability Laboratory ID...

StarMoney Banking Software - Multiple Vulnerabilities [HD]

Document Title: =============== StarMoney Banking Software - Multiple Vulnerabilities HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-30 Vulnerability Laboratory ID...

Velaro Live Chat HTML Injection

Exploit Title: Velaro Live Chat Software Cross Site Scripting Date: 29.08.2011 Author: Sony Software Link: http://www.velaro.com/features/live-chat Version: all version POC: http://st2tea.blogspot.com/2011/08/velaro-live-chat-software-cross-site.html...