SA100 : Apache Tomcat Vulnerabilities

SUMMARY Blue Coat products using affected versions of Tomcat 8.x, 7.x, and 6.x are susceptible to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to gain unauthorized read access or escalated privileges, or to conduct denial of service, HTTP request smuggling, or...

oxfordmail.co.uk XSS vulnerability

Vulnerable URL: http://www.oxfordmail.co.uk/search/?search=%22+autofocus+onfocus%3D%22alert%28%27XSSPOSED%27%29 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Early into the flash vulnerability analysis-vulnerability warning-the black bar safety net

Cut-off date by hackting team leaks the derived has been patched or will be patched 0day has reached 6 months. 3 by the ValueOf function induced flash vulnerabilities, 2 ring0 can lead to mentioning the right of the font parsing vulnerability, adobe or. dll kernel font parsing components, as well...

mailman: directory traversal in MTA transports that deliver programmatically

It was found that mailman did not sanitize the list name before passing it to certain MTAs. A local attacker could use this flaw to execute arbitrary code as the user running mailman...

UBUNTU-CVE-2015-5590

Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...

[SECURITY] Fedora 21 Update: thunderbird-38.1.0-1.fc21

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 22 Update: thunderbird-38.1.0-1.fc22

Mozilla Thunderbird is a standalone mail and newsgroup client...

FoxyCart Filter Bypass

Document Title: =============== FoxyCart Bug Bounty 1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1451 098bdc9b309783df65044c5abb690dafdd4bcd436c380ae68c924fe37e14b4e0 Release Date: ============= 2015-07-15...

Suspicious Sender Address

Most mail transfer agents perform certain normalizations over mail headers, including the sender address. A non-normalized sender address may imply a non-standard mail transfer agent, which could indicate suspicious activity...

FoxyCart Bug Bounty #1 - Bypass & Persistent Vulnerability

Document Title: =============== FoxyCart Bug Bounty 1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1451 098bdc9b309783df65044c5abb690dafdd4bcd436c380ae68c924fe37e14b4e0 Release Date: ============= 2015-07-15...

FoxyCart Bug Bounty #1 - Bypass & Persistent Vulnerability

Document Title: =============== FoxyCart Bug Bounty 1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1451 098bdc9b309783df65044c5abb690dafdd4bcd436c380ae68c924fe37e14b4e0 Release Date: ============= 2015-07-14...

Django Header Injection Vulnerability

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. A Header injection vulnerability exists in Django. An attacker can exploit this vulnerability ...

Disabled Users Receive Notification from Team Calendar

h3. Summary Confluence disabled users that subscribed to a calendar still receive notifications when calendar have new events added or when events in the subscribed calendar are modified. h3. Steps to Reproduce Create a new user in Confluence Make the new user watch a calendar in Team Calendar...

Courier Mail Server Memory Corruption Vulnerability

Courier Mail Server is a mail transfer proxy server that provides ESMTP, IMAP, POP3, SMAP, webmail and mailing list services. A memory corruption vulnerability exists in Courier Mail Server, which allows remote attackers to exploit the vulnerability to submit a special request that could crash th...

Hacking Team Flash New 0Day exploit code analysis-vulnerability warning-the black bar safety net

The weekend early in the morning, you see the know Chong Yu on the microblogging said, the Hacking Team and leaked to the new Flash 0Day in the current measured. Thus the author download a copy of the exploit code, tested indeed in the latest version available, currently the official Adobe did no...

The vulnerability of the Mail Dealer mail server allows a hacker to inject arbitrary web scripts or HTML code.

The vulnerability of the Mail Dealer mail server arises from the failure to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code through a specially created file...

WordPress Plugin WP E-Commerce Shop Styling 2.5 - Arbitrary File Download

Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-05 Download Site: https://wordpress.org/plugins/wp-ecommerce-shop-styling Vendor: https://profiles.wordpress.org/haet/ Vendor Notified: 2015-07-05, fixed...

WordPress WP-Ecommerce-Shop-Styling 2.5 File Download

Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-05 Download Site: https://wordpress.org/plugins/wp-ecommerce-shop-styling Vendor: https://profiles.wordpress.org/haet/ Vendor Notified: 2015-07-05, fixed...

Medium: php-ZendFramework

Issue Overview: Upstream reported http://framework.zend.com/security/advisory/ZF2015-04 a vulnerability in the Zend\Mail component in Zend Framework 2, specifically in how it handles headers. Headers are not correctly filtered for newlines, allowing the ability to send additional, unrelated heade...

WK UDID 1.0.1 Command Injection

Document Title: =============== WK UDID v1.0.1 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1539 Release Date: ============= 2015-07-01 Vulnerability Laboratory ID VL-ID: ==================================== 1539...