[SECURITY] Fedora 16 Update: haproxy-1.4.22-1.fc16

HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread the load among several servers while assuring server persistence through the use of HTTP cookies - switch t...

[SECURITY] Fedora 18 Update: haproxy-1.4.22-1.fc18

HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread the load among several servers while assuring server persistence through the use of HTTP cookies - switch t...

FreeBSD : mozilla -- multiple vulnerabilities (6e5a9afd-12d3-11e2-b47d-c8600054b392)

The Mozilla Project reports : MFSA 2012-74 Miscellaneous memory safety hazards rv:16.0/ rv:10.0.8 MFSA 2012-75 select element persistance allows for attacks MFSA 2012-76 Continued access to initial origin after setting document.domain MFSA 2012-77 Some DOMWindowUtils methods bypass security check...

NeoBill CMS 0.8 Alpha - Multiple Vulnerabilities

Title: ====== NeoBill CMS v0.8 Alpha - Multiple Web Vulnerabilities Date: ===== 2012-08-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=685 VL-ID: ===== 685 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Barracuda EMail Security 2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda EMail Security 2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=621 http://www.vulnerability-lab.com/getcontent.php?id=563 Barracuda Networks Security ID: BNSEC-304 Release Dat...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities

Title: ====== Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Date: ===== 2012-06-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=592 VL-ID: ===== 592 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ===========...

Useresponse 1.0.2 Backdoor / CSRF / Code Execution

!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...

PowerSploit

This project is no longer supported PowerSploit is a col...

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory :...

ArticleSetup 1.11 Cross Site Scripting / SQL Injection

Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory : http://secpod.org/blog/?p=497 http://secpod.org/advisories/SecPodArticleSetupMultipleVuln.txt...

ArticleSetup - Multiple Persistence Cross-Site Scripting / SQL Injections

Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory : http://secpod.org/blog/?p=497 http://secpod.org/advisories/SecPodArticleSetupMultipleVuln.txt...

voldemort-info NSE Script

Retrieves cluster and store information from the Voldemort distributed key-value store using the Voldemort Native Protocol. Example Usage nmap -p 6666 --script voldemort-info Script Output PORT STATE SERVICE 6666/tcp open irc | voldemort-info: | Cluster | Name: mycluster | Id: 0 | Host: localhost...

op5 Monitor Persistent Session Cookie

The remote web server has a version of op5 Monitor that improperly handles session cookies. The application sets an expiry date on cookies, causing logins to persist across sessions. Additionally, cookies are not reissued after login. Note that most versions affected by this vulnerability are als...

MySQL < 4.1.21 / 5.0.24 Privilege Persistence

The version of MySQL installed on the remote host is earlier than 4.1.21 / 5.0.24 and thus reportedly allows a local user to access a table after his privileges on it were revoked. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17802; scriptversion"1.5";...

Content Papst CMS v2011.2 - Multiple Web Vulnerabilities

Document Title: =============== Content Papst CMS v2011.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=363 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 36...

A Doomsday Worm - The Sputnik of 2011

We had an Interesting Article by "Paul F Renda" in our The Hacker News Magazine's November Edition. We would Like to share this article with our website readers also. You can Download November Issue Here. This is a theoretical prima to bring out a discussion about whether an Internet doomsday wor...

Adobe Website Cross Site Scripting

Title: ====== Adobe Web-Site Persistence XSS Status: ======== Unpatched Details: ======== 1. Signin to adobe.com 2. Go to My information 3. Change Screen Name to 'alert"xss"; or 'alert"xss"; 4. Go to My adobe @Asish [email protected]...

VMware.com Cross Site Scripting

alertdocument.cookie&category=all&isVmwareReadySelected=no Persistence Cross-Site Scripting Create a account in VMWARE. Insert First Name as : test "/alertdocument.cookie., Inserted script stored as first name. Login to vmware, Select Login to as Manage Orders, Inserted script get execute...

Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities

Document Title: =============== Argus Surveillance DVR v2.3 & 4.x - Multiple Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 227 Abstract Advisory Information: ============================== Vulnerability Lab Team...