Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability [CVE-2012-1417]

============================================================== Secur-I Research Group Security Advisory SV-2012-005 ============================================================== Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage:...

SSL/TLS: Report Medium Cipher Suites

This routine reports all Medium SSL/TLS cipher suites accepted by a service. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Censorship & Global Concerns [THN] - eZine Issue 009

Document Title: =============== Censorship & Global Concerns THN - eZine Issue 009 References: =========== Mirror: http://www.vulnerability-lab.com/resources/documents/468.pdf Article: http://www.vulnerability-lab.com/getcontent.php?id=468 Release Date: ============= 2012-03-06 Vulnerability...

Lastguru ASP Guestbook SQL Injection

Title: Lastguru ASP GuestBook 'View.asp' - SQL Injection Vulnerability Product : Lastguru ASP GuestBook Version : Free Version Vendor: http://www.LastGuru.com Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-03-04 Updated: Impact : Medium CVSSv2 Base : 7.5,...

LDAP Account Manager Pro v3.6 - Multiple Vulnerabilities

Document Title: =============== LDAP Account Manager Pro v3.6 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=458 Release Date: ============= 2012-03-01 Vulnerability Laboratory ID VL-ID: ==================================== 45...

Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage: http://www.yealink.com/ Impact: Medium Authentication: Required CVE: CVE-2012-1417 Found: 2012-02-21 Author: Narendra Shind...

Adobe Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Adobe Website - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=371 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 371...

OSQA CMS 3b Cross Site Scripting

Title: ====== OSQA CMS v3b - Multiple Persistent Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=461 VL-ID: ===== 461 Introduction: ============= OSQA is the Open Source Q&A System. It is free software licensed under the GPL, and y...

Wolf CMS v0.7.5 - Multiple Web Vulnerabilities

Document Title: =============== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=452 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 452 Product ...

Adobe Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Adobe Website - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=371 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 371...

CJWSoft ASPGuest Guestbook SQL Injection

Title: CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability Product : CJWSoft ASPGuest GuestBook Version : Free Version Vendor: http://www.cjwsoft.com/aspguest/default.asp Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-02-24 Updated: Impact : Medium CVSSv2...

Mercurycom MR804 Router Denial Of Service

Title: Mercurycom MR804 Router - Multiple HTTP Header Fields Denial Of Service Vulnerability Product : Mercurycom MR804 Router Hardware Version : MR804 v8.0 081C3113 Software Version : 3.8.1 Build 101220 Rel.53006nB Vendor: http://www.mercurycom.com.cn/ Class: Boundary Condition Error CVE: Remote...

PHP Webbots Technic via File Include & Webshell VD

Document Title: =============== PHP Webbots Technic via File Include & Webshell VD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/445.wmv View: http://www.youtube.com/watch?v=pwkUVZPxEmQ Release Date: ============= 2012-02-18 Vulnerability Laboratory ID VL-ID:...

Endian UTM Firewall 2.4.x Cross Site Scripting

Title: ====== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities Date: ===== 2012-02-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=436 VL-ID: ===== 436 Introduction: ============= The Endian Firewall is an open source GNU/Linux distribution that specializes on...

Pandora FMS v4.0.1 - Local Path Include Vulnerability

Document Title: =============== Pandora FMS v4.0.1 - Local Path Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=435 Release Date: ============= 2012-02-16 Vulnerability Laboratory ID VL-ID: ==================================== 435...

FreeBSD : chromium -- multiple vulnerabilities (2f5ff968-5829-11e1-8288-00262d5ed8ee)

Google Chrome Releases reports : 105803 High CVE-2011-3015: Integer overflows in PDF codecs. Credit to Google Chrome Security Team scarybeasts. 106336 Medium CVE-2011-3016: Read-after-free with counter nodes. Credit to miaubiz. 108695 High CVE-2011-3017: Possible use-after-free in database...

Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities

No description provided by source. Introduction: ============= Scriptable, distributed and object oriented Hosting Platform. Manage Clients, Resellers, Domains, Backups, Stats, Mails and Databases. Manage everything! Copy of the Vendor Homepage: http://www.lxcenter.org/ Abstract: =========...

Kloxo LxCenter Server CP 6.1.10 Cross Site Scripting

Title: ====== Kloxo LxCenter Server CP v6.1.10 - Multiple Web Vulnerabilities Date: ===== 2012-02-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=429 VL-ID: ===== 429 Introduction: ============= Scriptable, distributed and object oriented Hosting Platform. Manage...

Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=430 Release Date: ============= 2012-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 43...

FreeBSD : chromium -- multiple vulnerabilities (fe1976c2-5317-11e1-9e99-00262d5ed8ee)

Google Chrome Releases reports : 73478 Low CVE-2011-3953: Avoid clipboard monitoring after paste event. Credit to Daniel Cheng of the Chromium development community. 92550 Low CVE-2011-3954: Crash with excessive database usage. Credit to Collin Payne. 93106 High CVE-2011-3955: Crash aborting an...