Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...

PunBB PHP Forum 1.3.5 Cross Site Scripting

======================================================================= PunBB PHP Forum - Multiple XSS ======================================================================= Affected Software : PunBB PHP Forum Severity : Medium Local/Remote : Remote Author : @drk1wi Summary Just for those whom i...

Vodafone EasyBox A600 WLan Router - Web Vulnerability

Document Title: =============== Vodafone EasyBox A600 WLan Router - Web Vulnerability Release Date: ============= 2011-09-15 Vulnerability Laboratory ID VL-ID: ==================================== 100 Product & Service Introduction: =============================== Die EasyBox A 601 eignet sich zu...

Vodafone EasyBox A600 WLan Router - Web Vulnerability

Document Title: =============== Vodafone EasyBox A600 WLan Router - Web Vulnerability Release Date: ============= 2011-09-15 Vulnerability Laboratory ID VL-ID: ==================================== 100 Product & Service Introduction: =============================== Die EasyBox A 601 eignet sich zu...

Improper error handling could lead to cache flooding in TYPO3 Core

It has been discovered that TYPO3 is susceptible to Cache Flooding Component Type: TYPO3 Core Affected Versions: 4.2.0 - 4.2.17, 4.3.0 - 4.3.13, 4.4.0 - 4.4.10 and 4.5.0 - 4.5.5 Release Date: September 14, 2011 Vulnerable subcomponent: Caching System Vulnerability Type: Improper error handling...

GeoClassifieds Lite 2.0.x SQL Injection / Cross Site Scripting

--------------------------------------------------------------------- + Title : GeoClassifieds Lite Multiple vulnerabilities + Affected Version : v2.0.1 & V2.0.3.1 & V2.0.3.2 &V2.0.4 + Software Link : http://geodesicsolutions.com/ + Tested on : Windows 7 + Date : 25/08/2011 + Dork : "inurl:/admin...

Notebooksbilliger Website - Persistent Web Vulnerability

Document Title: =============== Notebooksbilliger Website - Persistent Web Vulnerability Release Date: ============= 2011-09-07 Vulnerability Laboratory ID VL-ID: ==================================== 265 Product & Service Introduction: =============================== Die Firma wurde im Jahr 1989...

ME Firewall Analyzer v7.1 - Multiple Web Vulnerabilities

Document Title: =============== ME Firewall Analyzer v7.1 - Multiple Web Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 264 Product & Service Introduction: =============================== ManageEngine Firewall Analyze...

Bitdefender 2011 File Vault - Buffer Overflow Vulnerability

Document Title: =============== Bitdefender 2011 File Vault - Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/262.wmv View: http://www.youtube.com/watch?v=98eA1cIAO8k Release Date: ============= 2011-09-01 Vulnerability Laboratory ...

BitDefender IS2011 - FV Buffer Overflow Vulnerability

Document Title: =============== BitDefender IS2011 - FV Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=147 Release Date: ============= 2011-08-29 Vulnerability Laboratory ID VL-ID: ==================================== 147...

La Poste FR Website - Reflective Cross Site Vulnerabilities

Document Title: =============== La Poste FR Website - Reflective Cross Site Vulnerabilities Release Date: ============= 2011-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 255 Product & Service Introduction: =============================== La Poste is the mail servi...

Cross Site Scripting Vulnerability in extension Questionaire (pbsurvey)

It has been discovered that the extension "Questionaire" pbsurvey is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.3.0 and below Vulnerability Types: Cross-Site Scripting...

Several Vulnerabilities in extension Formhandler (formhandler)

It has been discovered that the extension Formhandler formhandler is vulnerable to SQL-Injection and Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.14 and below Vulnerability Types: SQL...

Strato Server ACP - Persistent DOM XSS Vulnerabilities

Document Title: =============== Strato Server ACP - Persistent DOM XSS Vulnerabilities Release Date: ============= 2011-08-24 Vulnerability Laboratory ID VL-ID: ==================================== 141 Product & Service Introduction: =============================== Control Panel of Strato Hosting...

UltraFXP v1.07 - Memory Corruption Vulnerability

Document Title: =============== UltraFXP v1.07 - Memory Corruption Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 161 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

CiscoKits TFTP Directory Traversal

CiscoKits TFTP Server Directory Traversal Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1022 21/07/2011 Issue Discovered 03/08/2011 Vendor Notified Vendor Replied to Disclose 04/08/2011 Advisory Released Class: Information Disclosure Severity: Medium Overview:...

VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities

Document Title: =============== VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities Release Date: ============= 2011-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 120 Product & Service Introduction: =============================== V&V messenger is an insta...

MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities

Document Title: =============== MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 125 Product & Service Introduction: =============================== MODx helps you take control of...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability

Document Title: =============== Skype v5.3.x v2.2.x v5.2.x - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/234.wmv View: http://www.youtube.com/watch?v=b9p4BZ0vsAI Release Date: ============= 2011-07-28 Vulnerability Laboratory...