Yealink VOIP Phone Cross Site Scripting

============================================================== Secur-I Research Group Security Advisory SV-2012-005 ============================================================== Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage:...

Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage: http://www.yealink.com/ Impact: Medium Authentication: Required CVE: CVE-2012-1417 Found: 2012-02-21 Author: Narendra Shind...

Wolf CMS 0.7.5 - Multiple Vulnerabilities

Wolf CMS 0.7.5 - Multiple Vulnerabilities Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is...

Wolf CMS 0.7.5 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications Title: ====== Wolf CMS 0.7.5 Cross Site Scripting / SQL Injection Date: ===== 2012-02-27 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU General Public License v3. Wolf CMS is...

Wolf CMS 0.7.5 - Multiple Vulnerabilities

Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU...

PayPal Revises Privacy Policy, User Agreement Policy

PayPal announced that it is changing both its privacy and user agreement policies, adding tweaks to its customer identification program and the way it collects and stores its customers’ personal information. The changes will take effect on April 1. Under the new policy, Paypal may collect...

RSA: Chaos In the Security World, And the Situation Is Perfect

Right on cue this week, the anarchic hacking collective Anonymous stepped up and grabbed the story line away from the lions of the IT security industry. With the annual RSA Conference set to begin, the whistle blowing site Wikileaks released the first of some five million e-mail messages stolen...

Anchor v0.6-0.4 CMS - Persistent Web Vulnerability

Document Title: =============== Anchor v0.6-0.4 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=453 Release Date: ============= 2012-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 453...

Anchor v0.6-0.4 CMS - Persistent Web Vulnerability

Document Title: =============== Anchor v0.6-0.4 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=453 Release Date: ============= 2012-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 453...

Kongreg8 1.7.3 Cross Site Scripting

Exploit Title: Kongreg8 1.7.3 Mutiple XSS Date: 02/24/12 Author: G13 Software Link: https://sourceforge.net/projects/kongreg8/ Version: 1.7.3 Category: webapps php Vulnerability Kongreg8 1.7.3 has multiple XSS vulnerabilites. These vulnerabilities are in the Add Member and Add Group functions...

Gazelle Anatasoft CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== Gazelle Anatasoft CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=451 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Wolf CMS v0.7.5 - Multiple Web Vulnerabilities

Document Title: =============== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=452 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 452 Product ...

Gazelle Anatasoft CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== Gazelle Anatasoft CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=451 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Wolf CMS v0.7.5 - Multiple Web Vulnerabilities

Document Title: =============== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=452 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 452 Product ...

Microsoft AdCenter Service - Cross Site Vulnerabilities

Document Title: =============== Microsoft AdCenter Service - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=447 MSRC ID: 12223 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID:...

Adobe Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Adobe Website - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=371 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 371...

OSQA CMS v3b - Multiple Web Vulnerabilities

Document Title: =============== OSQA CMS v3b - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=461 Release Date: ============= 2012-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 461 Common...

WonderDesk Cross Site Scripting

Exploit Title: WonderDesk Cross Site Scripting Date: 26.02.2012 Author: Sony Software Link: http://www.wonderdesk.com/ Google Dorks: inurl:wonderdesk.cgi?do Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html...

Xavi 7968 ADSL Router Cross Site Request Forgery / Cross Site Scripting

Xavi 7968 ADSL Router: Persistent cross site scripting XSS / Cross site request forgery CSRF ------------------------------------------------------------------------------------------------ Description: Xavi 7968 Router is completely vulnerable to Persistent cross site scripting XSS and Cross sit...

Jamroom Cross Site Scripting

Exploit Title: Jamroom Cross Site Scripting Date: 19.02.2012 Author: Sony Software Link: http://www.jamroom.net Google Dorks: Powered by Jamroom Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html...