ePhoto Transfer v1.2.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== ePhoto Transfer v1.2.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1017 Release Date: ============= 2013-07-16 Vulnerability Laboratory ID VL-ID: ====================================...

Wifi Album v1.47 iOS - Command Injection Vulnerability

Title: ====== Wifi Album v1.47 iOS - Command Injection Vulnerability Date: ===== 2013-04-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=935 VL-ID: ===== 935 Common Vulnerability Scoring System: ==================================== 5.6 Introduction: ============= WiF...

Trend Micro DirectPass - Cloud Software Vulnerabilities

Document Title: =============== Trend Micro DirectPass - Cloud Software Vulnerabilities References: =========== Advisory: http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 View: http://www.youtube.com/watch?v=Mbf0KqvSERs Release Date:...

Xen 3.0.3 - pygrub TOOLS/PYGRUB/SRC/GRUBCONF.PY Local Command Injection

source: https://www.securityfocus.com/bid/25825/info Xen is prone to a local command-injection vulnerability that can lead to privilege escalation. This issue occurs because the application fails to validate input in the 'tools/pygrub/src/GrubConf.py' script. This vulnerability affects Xen 3.0.3;...

Xen 3.0.3 - pygrub TOOLSPYGRUBSRCGRUBCONF.PY Local Command Injection

Xen 3.0.3 - pygrub TOOLSPYGRUBSRCGRUBCONF.PY Local Command Injection source: https://www.securityfocus.com/bid/25825/info Xen is prone to a local command-injection vulnerability that can lead to privilege escalation. This issue occurs because the application fails to validate input in the...

vulnerability in mail.local

hi, mail.local is a little setuid root prog designed, like its name suggest, for local mail delivering. Used with the -l option, we have an interactive mode in lmtp protocol simplified smtp for local mail delivery only A weakness exists in the 'mail from' field that allow any local user to insert...