Inout Mobile Webmail APP Persistent XSS Vulnerability

Exploit for php platform in category web applications Inout Mobile Webmail APP - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the inoutscripts mobile Inoutmail CMS 2012. The bugs allow remote attackers to implement/inject...

Scientific Linux Security Update : systemtap on SL4.x i386/x86_64

CVE-2010-0411 systemtap: Crash with systemtap script using getargv A buffer overflow flaw was found in SystemTap's tapset getargv function. If a privileged user ran a SystemTap script that called this function, a local, unprivileged user could, while that script is still running, trigger this fla...

Scientific Linux Security Update : qspice on SL5.x x86_64

It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash denial of service or,...

Scientific Linux Security Update : kvm on SL5.x x86_64

A flaw was found in the way QEMU-KVM handled the reloading of fs and gs segment registers when they had invalid selectors. A privileged host user with access to '/dev/kvm' could use this flaw to crash the host denial of service. CVE-2010-3698 The following procedure must be performed before this...

Scientific Linux Security Update : systemtap on SL5.x, SL6.x i386/x86_64 (20120308)

SystemTap is an instrumentation system for systems running the Linux kernel. The system allows developers to write scripts to collect data on the operation of the system. An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When...

xen security update

CentOS Errata and Security Advisory CESA-2012:1130 Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

ShopperPress v2.7 Wordpress - SQL Injection Vulnerability

Document Title: =============== ShopperPress v2.7 Wordpress - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=669 Release Date: ============= 2012-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 6...

Social Engine v4.2.5 - Multiple Web Vulnerabilities

Document Title: =============== Social Engine v4.2.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=672 Release Date: ============= 2012-07-30 Vulnerability Laboratory ID VL-ID: ==================================== 672...

CentOS Update for systemtap CESA-2012:0376 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for systemtap CESA-2011:0841 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Barracuda Appliances - Validation Filter Bypass Vulnerability

Document Title: =============== Barracuda Appliances - Validation Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=661 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================...

Reserve Logic v1.2 Booking CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Reserve Logic v1.2 Booking CMS - Multiple Vulnerabilities Introduction: ============= iScripts ReserveLogic offers an online web based reservation system for the hospitality industry for service providers. This turn-key reservation system allo...

Arasism (IR) CMS - File Upload Vulnerability

Document Title: =============== Arasism IR CMS - File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=657 Release Date: ============= 2012-07-11 Vulnerability Laboratory ID VL-ID: ==================================== 657 Common...

CLscript CMS v3.0 - Multiple Web Vulnerabilities

Title: ====== CLscript CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-05-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=574 VL-ID: ===== 574 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============= With the...

GuestBook Scripts PHP v1.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= GuestBook Script PHP is a script that is very easy to install,...

Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Billing, ticketing, reporting and configuration for employees...

Python-wrapper Untrusted Search Path / Code Execution

python-wrapper untrusted search path/code execution vulnerability Python-wrapper executes any test.py script within the current working directory, when supplied with help'modules'. A non-priviledged user may gain code execution by tricking root to help'modules' or help and then modules from withi...

python-wrapper - Untrusted Search Path/Code Execution

python-wrapper untrusted search path/code execution vulnerability Python-wrapper executes any test.py script within the current working directory, when supplied with help'modules'. A non-priviledged user may gain code execution by tricking root to help'modules' or help and then modules from withi...

python-wrapper untrusted search path/code execution

Exploit for python platform in category local exploits Exploit Title: python-wrapper untrusted search path/code execution vulnerability Date: 06-30-12 Exploit Author: ShadowHatesYou Vendor Homepage: python.org Software Link: http://python.org/download/ Version: Python 2.7.3 and earlier Tested on:...

Buffer Overflow Vulnerabilities in the Cisco WebEx Player

The Cisco WebEx Recording Format WRF player contains four buffer overflow vulnerabilities and the Cisco Advanced Recording Format ARF player contains one buffer overflow vulnerability. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on th...