12 Flaws Fixed in Google Chrome

Google has fixed 12 security vulnerabilities in Chrome, including six high-risk bugs. The new version of the browser includes a number of fixes for bugs discovered by external researchers as well as by Google’s own internal security team. Two of the more serious vulnerabilities patched in Chrome...

IBM Tape Library Not Listed in Device Manager under “Medium Changers”

Challenge IBM System Storage Tape Library does not appear under the heading Medium Changers in the Device Manager, preventing it from working with Veeam Backup & Replication. Cause The issue occurs when the Library Mode is set to Sequential within the IBM System Storage Tape Library configuration...

pdirl PHP Directory Listing 1.0.4 - Cross-Site Scripting

pdirl PHP Directory Listing 1.0.4 - Cross-Site Scripting Document Title: =============== pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1130 Release Date: =============...

CA20131024-01: Security Notice for CA SiteMinder

-----BEGIN PGP SIGNED MESSAGE----- CA20131024-01: Security Notice for CA SiteMinder Issued: October 24, 2013 CA Technologies Support is alerting customers to a potential vulnerability in CA SiteMinder that can be mitigated by utilizing existing product functionality. The vulnerability,...

ZAPms v1.42 CMS - Client Side Cross Site Scripting Web Vulnerability

Document Title: =============== ZAPms v1.42 CMS - CS Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1112 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ===================================...

Contexis CMS 1.0 Cross Site Scripting

CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: G...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Feng Office 2.3.2-rc Cross Site Scripting

Advisory ID: HTB23174 Product: Feng Office Vendor: Secure Data SRL Vulnerable Versions: 2.3.2-rc and probably prior Tested Version: 2.3.2-rc Advisory Publication: September 18, 2013 without technical details Vendor Notification: September 18, 2013 Public Disclosure: October 9, 2013 Vulnerability...

Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass

Document Title: =============== Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1104 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: https://www.youtube.com/watch?v=6e-hvglQdg Release Date:...

SQL Injection in vtiger CRM

Advisory ID: HTB23168 Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

WebAssist PowerCMS PHP - Multiple Web Vulnerabilities

Document Title: =============== WebAssist PowerCMS PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1098 Release Date: ============= 2013-09-27 Vulnerability Laboratory ID VL-ID: ==================================== 1098...

SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)

It has been discovered that the extension "RealURL: speaking paths for TYPO3" realurl is vulnerable to SQL-Injection. Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.12.6 and below...

Apple iOS7 iPhone5 iPad2 - Pass Code Bypass Vulnerability

Document Title: =============== Apple iOS7 iPhone5 iPad2 - Pass Code Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1092 View: http://www.youtube.com/watch?v=71k7szhokg Release Date: ============= 2013-09-24 Vulnerability Laboratory ID VL-ID:...

Facebook - Private Message (Attachment ID) Vulnerability

Document Title: =============== Facebook - Private Message Attachment ID Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1087 View: http://www.youtube.com/watch?v=azzZ7KDMMKw Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID:...

Joomla JVideoClip Blind SQL Injection

================================================================================ Joomla Component comjvideoclip cid|uid|id Blind SQL Injection / SQL Injection ================================================================================ Author : SixP4ck3r Email & msn : [email protected] Da...

WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload

Document Title: =============== WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1080 Release Date: ============= 2013-09-16 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability

Document Title: =============== Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=945 Release Date: ============= 2013-09-08 Vulnerability Laboratory ID VL-ID: ====================================...

Wiz 5.0.3 User Mode Write Access Violation Vulnerability

Wiz version 5.0.3 suffers from a user mode write access violation vulnerability. Title: User Mode Write Access Violation in Wiz 5.0.3 Severity: Medium History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez, Miguel Angel de Castro Simon Organization:...

PWStore 2010.8.30.0 Cross Site Scripting / Denial Of Service

PWStore version 2010.8.30.0 suffers from cross site scripting and denial of service vulnerabilities. - RealPentesting Advisory - Title: MULTIPLE VULNERABILITIES IN PWSTORE 2010.8.30.0 Severity: Medium History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez,...