Zimbra Desktop v7.1.2 - Persistent Software Vulnerability

Document Title: =============== Zimbra Desktop v7.1.2 - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=378 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Tine v2.0 Maischa - Cross Site Scripting Vulnerability

Document Title: =============== Tine v2.0 Maischa - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=379 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 379...

Barracuda SSL VPN 480 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=35 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 35...

WebCalendar -- Persistent XSS

tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS...

Multiple new vulnerabilities in Register Plus Redux for WordPress

Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected...

ATMAIL WebMail Admin 6.3.4 Cross Site Scripting

Title: ====== ATMAIL WebMail Admin v6.3.4 - Multiple Vulnerabilities Date: ===== 2012-01-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=376 VL-ID: ===== 376 Introduction: ============= Atmail is a commercial Linux messaging platform provider. The company was founded...

SonicWall AntiSpam & EMail v7.x - Multiple Vulnerabilities

Document Title: =============== SonicWall AntiSpam & EMail v7.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=58 Release Date: ============= 2012-01-07 Vulnerability Laboratory ID VL-ID: ==================================== 5...

The Hacker News Hacking Awards : Best of Year 2011

The Hacker News Hacking Awards : Best of Year 2011 2011 has been labeled the "Year of the Hack" or "Epic Fail 2011". Hacking has become much easier over the years, which is why 2011 had a lot of hacking for good and for bad. Hackers are coming up with tools as well as finding new methods for...

Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability

Exploit for php platform in category web applications Title: ====== Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability Date: ===== 2011-12-22 Introduction: ============= Gwibber is a microblogging client for the GNOME desktop environment. It was created by Ryan Paul, a writer for Ars...

Astaro Gateway v8.1 - Input Validation Vulnerability

Document Title: =============== Astaro Gateway v8.1 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=193 Release Date: ============= 2011-12-26 Vulnerability Laboratory ID VL-ID: ==================================== 193...

Astaro Gateway v8.1 - Input Validation Vulnerability

Document Title: =============== Astaro Gateway v8.1 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=193 Release Date: ============= 2011-12-26 Vulnerability Laboratory ID VL-ID: ==================================== 193...

Netlog Social - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Netlog Social - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=345 Release Date: ============= 2011-12-24 Vulnerability Laboratory ID VL-ID: ==================================...

Netlog Social - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Netlog Social - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=345 Release Date: ============= 2011-12-24 Vulnerability Laboratory ID VL-ID: ==================================...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...

Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability

Document Title: =============== Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=365 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability

Document Title: =============== Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=365 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

CS и XSS уязвимости в Zeema CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Content Spoofing и Cross-Site Scripting уязвимостях в системе Zeema CMS. Это украинская коммерческая CMS. Content Spoofing WASC-12: В связи с возможностью прямого обращения к скрипту http://site/counter/counter.php с подделкой параметра ref и...

Content Papst CMS v2011.2 - Multiple Web Vulnerabilities

Document Title: =============== Content Papst CMS v2011.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=363 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 36...

Content Papst CMS 2011.2 Cross Site Scripting / Information Disclosure

Title: ====== Content Papst CMS v2011.2 - Multiple Web Vulnerabilities Date: ===== 2011-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=363 VL-ID: ===== 363 Introduction: ============= Contentpapst ist ein leistungsstarkes und sehr flexibles...

Windows Command Shell, Bind TCP (via perl) IPv6

Listen for a connection and spawn a command shell via perl persistent This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 140 include Msf::Payload::Single include...