CGI Generic XSS (extended patterns)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities

Document Title: =============== DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2011-07-28 Vulnerability Laboratory ID VL-ID: ==================================== 70...

HijackThis Log Analyse - Multiple Web Vulnerabilities

Document Title: =============== HijackThis Log Analyse - Multiple Web Vulnerabilities Release Date: ============= 2011-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 107 Product & Service Introduction: =============================== HijackThis opens you a possibili...

HijackThis Log Analyse - Multiple Web Vulnerabilities

Document Title: =============== HijackThis Log Analyse - Multiple Web Vulnerabilities Release Date: ============= 2011-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 107 Product & Service Introduction: =============================== HijackThis opens you a possibili...

XING Network Website - Multiple Web Vulnerabilities

Document Title: =============== XING Network Website - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=87 Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 87 Produ...

Wordpress Audio Player v2.0b6 - Web Vulnerability

Document Title: =============== Wordpress Audio Player v2.0b6 - Web Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 84 Product & Service Introduction: =============================== Wordpress Audio Player Plugin/Addon...

Wordpress Audio Player v2.0b6 - Web Vulnerability

Document Title: =============== Wordpress Audio Player v2.0b6 - Web Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 84 Product & Service Introduction: =============================== Wordpress Audio Player Plugin/Addon...

Advanced Threats Are Not All the APT

By B.K. DeLong We have heard variations on the argument that within the context of information security, the “advanced persistent threat” APT is not really all that advanced or new, that it is being made too big a deal of or FUD and that it is no more than marketing hype though more of an effort...

Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability References: =========== View: http://www.youtube.com/watch?v=eIgb9D-0DWs Download: http://www.vulnerability-lab.com/resources/videos/222.wmv Release Date: ============= 2011-07-14 Vulnerability Laboratory I...

Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Profile Vulnerability References: =========== View: http://www.youtube.com/watch?v=eIgb9D-0DWs Download: http://www.vulnerability-lab.com/resources/videos/222.wmv Release Date: ============= 2011-07-14 Vulnerability Laboratory I...

PG Newsletter Cross Site Scripting

%+ $...............4.........|.......0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: PG Newsletter persistent XSS vulnerability Vendor: demo.newsletter.pro Author: $4d0//r007k17 a.k.a Raghavendra Karthik D My Blog: http://www.shadowrootkit.wordpress.com Google...

Hopestudio.in Cross Site Scripting

%+ $...............4.........|.......0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: Hopestudio.in persistent XSS vulnerability Vendor: www.hopestudio.in/demo.php Author: $4d0//r007k17 a.k.a Raghavendra Karthik D My Blog: http://www.shadowrootkit.wordpress.com...

CouponScript Cross Site Scripting

%+ $...............4.........|.......0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: CouponScript persistent XSS vulnerability Vendor: www.couponscript.org Author: $4d0//r007k17 a.k.a Raghavendra Karthik D My Blog: http://www.shadowrootkit.wordpress.com Google...

Fire Soft Board 2.0.1 Cross Site Scripting

Exploit Title: Fire Soft Board alertdocument.cookie popup with your cookies :- Fix : upgrade to last release 2.0.2 -= Greatz to x =-...

BACS Demo Cross Site Scripting

BACS DEMO persistent XSS vulnerabilties vendor: www.bacsdemo.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: Copyright © 2009 Coupon codes Exploits: Persistent XSS vulnerability in the admin panel-static page-add new section. In html mo...

Micro CMS v1.0.1 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Micro CMS v1.0.1 - Persistent Cross Site Scripting Vulnerability Release Date: ============= 2011-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 152 Product & Service Introduction: =============================== Parallels Plesk Panel...

Mobilkom Austria Cross Site Scripting

G'Day Ladies and Gents, it has been already over 3 weeks now, since they've told me they're going to fix this flaws, as soon as they've resolved more important tasks... I think they had enough time, so here is my first disclosure. Just a little, not that important non-persistent XSS. Cookie...

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting (Admin Panel)

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting Admin Panel Exploit Title: Fire Soft Board alertdocument.cookie popup with your cookies :- Fix : upgrade to last release 2.0.2 -= Greatz to x =-...