LiveZilla 5.1.2.0 Insecure password storage

Author: Jakub Zoczek [email protected] CVE Reference: CVE-2013-7033 Product: LiveZilla Vendor: LiveZilla GmbH http://livezilla.net Affected version: 5.1.2.0 Severity: Medium CVSSv2 Score: 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N Status: Partly fixed 0x01 Background LiveZilla, the widely-used and trusted Liv...

eduTrac 1.1.1-Stable Path Traversal Vulnerability

Exploit for php platform in category web applications Product: eduTrac Vendor: 7 Media Web Solutions, LLC. Vulnerable Versions: 1.1.1-Stable and probably prior Tested Version: 1.1.1-Stable Advisory Publication: December 11, 2013 without technical details Vendor Notification: December 11, 2013...

Solaris 10 (sparc) : 146241-05 (deprecated)

Oracle Solaris Cluster 3.3: SWIFTAlliance patch for Oracle Solaris. Date this patch was last updated by Sun : Mar/12/13 This plugin has been deprecated and either replaced with individual 146241 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security...

Solaris 10 (sparc) : 145646-11 (deprecated)

Oracle Solaris Cluster 3.3: HA-MySQL Patch for Oracle Solaris 10. Date this patch was last updated by Sun : May/08/17 This plugin has been deprecated and either replaced with individual 145646 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (sparc) : 147497-02 (deprecated)

Oracle Solaris Cluster 3.3: HA-DHCP Patch for Oracle Solaris 10. Date this patch was last updated by Sun : Mar/12/13 This plugin has been deprecated and either replaced with individual 147497 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (x86) : 145342-06 (deprecated)

Oracle Solaris Cluster 3.3: HA-Tomcat Patch for Oracle Solaris 10. Date this patch was last updated by Sun : Apr/19/17 This plugin has been deprecated and either replaced with individual 145342 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (x86) : 142786-17

Oracle Communications Calendar Server 7u5-17.22x86: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 142785-17 (deprecated)

Oracle Communications Calendar Server 7u5-17.22: core patch. Date this patch was last updated by Sun : Feb/21/15 This plugin has been deprecated and either replaced with individual 142785 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Solaris 8 (x86) : 147695-99

JavaSE 7x86: update 99 patch equivalent. Date this patch was last updated by Sun : Mar/23/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 145712-07 (deprecated)

Convergence 2.0-7.01x86: core patch. Date this patch was last updated by Sun : Dec/02/13 This plugin has been deprecated and either replaced with individual 145712 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 145346-04 (deprecated)

Oracle Solaris Cluster 3.3: HA-SunONE App Server Patch for Oracle. Date this patch was last updated by Sun : Mar/12/13 This plugin has been deprecated and either replaced with individual 145346 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability

Document Title: =============== QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1173 View: http://www.youtube.com/watch?v=6aQR8H6HoCs http://www.vulnerability-lab.com/getcontent.php?id=1171 Resources:...

QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability

Document Title: =============== QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1173 View: http://www.youtube.com/watch?v=6aQR8H6HoCs http://www.vulnerability-lab.com/getcontent.php?id=1171 Resources:...

Codiad 2.0.7 Cross Site Scripting

Exploit Title: Codiad - Stored Persistent Cross Site Scripting Vulnerability Date: 02/12/2013 Exploit Author: Project Zero Labs Vendor Homepage: http://www.codiad.com Software Link: https://github.com/Codiad/Codiad Version: v.2.0.7 Tested on: Kali Linux / Iceweasel v.22 About the software:...

Microsoft Online, Office And Cloud Persistent Encoding Issues

Document Title: =============== Microsoft Online, Office & Cloud - Persistent Encoding Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=806 Microsoft Security Response Center MSRC ID: 14090 Microsoft Security Response Center MSRC Manager:...

Microsoft PhotoStory CS Cross Site Scripting

Document Title: =============== Microsoft PhotoStory - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1012 Microsoft Security Response Center MSRC ID: 15155 Release Date: ============= 2013-12-12 Vulnerability...

Microsoft Yammer - Persistent Profile Vulnerabilities

Document Title: =============== Microsoft Yammer - Persistent Profile Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=978 MSRC ID: 14808 Release Date: ============= 2013-12-11 Vulnerability Laboratory ID VL-ID:...

MS13-097 Registry Symlink IE Sandbox Escape

This module exploits a vulnerability in Internet Explorer Sandbox which allows to escape the Enhanced Protected Mode and execute code with Medium Integrity. The vulnerability exists in the IESetProtectedModeRegKeyOnly function from the ieframe.dll component, which can be abused to force medium...

LiveZilla 5.1.1.0 Cross Site Scripting

Author: Jakub Zoczek [email protected] CVE Reference: CVE-2013-7003 Product: LiveZilla Vendor: LiveZilla GmbH http://livezilla.net Affected version: 5.1.1.0 Severity: Medium CVSSv2 Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N Status: Fixed 0x01 Background LiveZilla, the widely-used and trusted Live Help...

LiveZilla 5.1.0.0 Cross Site Scripting

Author: Jakub Zoczek [email protected] CVE Reference: CVE-2013-7002 Product: LiveZilla Vendor: LiveZilla GmbH http://livezilla.net Affected version: 5.1.0.0 Severity: Medium CVSSv2 Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N Status: Fixed 0x01 Background LiveZilla, the widely-used and trusted Live Help...