7800 matches found
glFusion 1.2.2 Cross Site Scripting Vulnerability
glFusion version 1.2.2 suffers from multiple cross site scripting vulnerabilities. Product: glFusion Vendor: http://www.glfusion.org/ Vulnerable Versions: 1.2.2 and probably prior Tested Version: 1.2.2 Vendor Notification: January 30, 2013 Vendor Patch: January 30, 2013 Public Disclosure: Februar...
glFusion 1.2.2 - Multiple Cross-Site Scripting Vulnerabilities
glFusion 1.2.2 - Multiple Cross-Site Scripting Vulnerabilities Advisory ID: HTB23142 Product: glFusion Vendor: http://www.glfusion.org/ Vulnerable Versions: 1.2.2 and probably prior Tested Version: 1.2.2 Vendor Notification: January 30, 2013 Vendor Patch: January 30, 2013 Public Disclosure:...
Research Outlines New Deep Freeze Data Recovery Technique on Android Phone
Hackers and data recovery specialists alike could soon be turning to a new technique that under the right conditions can allow for the harvesting of personal information from phones, even after they’ve been frozen. A group of German researchers from the University of Erlangen-Nuremberg have...
Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities
Document Title: =============== Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=874 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=875 View: http://www.youtube.com/watch?v=oKOj0GMf810 Release Date:...
Research In Motion Releases Security Update for BlackBerry Enterprise Server
Research In Motion RIM has released a security advisory for BlackBerry Enterprise Server to address multiple vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to execute arbitrary code or allow elevation of privileges. RIM has released updates for the following...
Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities
Document Title: =============== Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=874 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=875 View: http://www.youtube.com/watch?v=oKOj0GMf810 Release Date:...
Cool PDF Reader 3.0.2.256 - Buffer Overflow
Cool PDF Reader 3.0.2.256 - Buffer Overflow Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery:...
Cool PDF Reader 3.0.2.256 - Buffer Overflow
Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery: Francis Provencher Protek Research Lab's...
WordPress Wysija Newsletters 2.2 SQL Injection
Advisory ID: HTB23140 Product: Wysija Newsletters WordPress plugin Vendor: Wysija Vulnerable Versions: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: January 16, 2013 Vendor Patch: January 18, 2013 Public Disclosure: February 6, 2013 Vulnerability Type: SQL Injection CWE-89 CVE...
WordPress CommentLuv 2.92.3 Cross Site Scripting
Advisory ID: HTB23138 Product: CommentLuv WordPress plugin Vendor: Andy Bailey Vulnerable Versions: 2.92.3 and probably prior Tested Version: 2.92.3 Vendor Notification: January 16, 2013 Vendor Patch: January 17, 2013 Public Disclosure: February 6, 2013 Vulnerability Type: Cross-Site Scripting...
Multiple Vulnerabilities in Piwigo
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Piwigo, which can be exploited to perform Сross-Site Request Forgery and Path Traversal attacks. 1 Сross-Site Request Forgery CSRF in Piwigo: CVE-2013-1468 The vulnerability exists due to insufficient verificatio...
PT-2013-06: Current User Context Access in Oracle Siebel CRM
The specialists of the Positive Research center have detected a Current User Context Access vulnerability in Oracle Siebel CRM. An attacker is able to access the system and operate in the name of aby user. The attacker can get context bruteforcing certain cookie values. All systems with hard-code...
Eugene Kaspersky
Costin Raiu, the head of the Kaspersky Lab Global Research and Analysis Team, Petr Merkulov, chief product officer, and CEO Eugene Kaspersky, discussed the need for better awareness of security threats and more comprehensive protection...
PokerAgent botnet stole over 16,000 Facebook credentials
PokerAgent botnet was discovered in 2012 by ESET Security Research Lab, which is a Trojan horse designed to harvest Facebook log-on credentials, also collecting information on credit card details linked to the Facebook account and Zynga Poker player stats. According to latest report, the botnet i...
nCircle patches PureCloud vulnerability scanner on Vulnerability-Lab report
The Vulnerability-Laboratory Research Team discovered persistent and client side POST Injection web vulnerability in the nCircle PureCloud cloud-based Vulnerability Scanner Application. The vulnerability allows an attacker to inject own malicious script code in the vulnerable module on applicatio...
Cross-Site Scripting (XSS) vulnerability in gpEasy
Advisory ID: HTB23137 Product: gpEasy Vendor: gpeasy Vulnerable Versions: 3.5.2 and probably prior Tested Version: 3.5.2 Vendor Notification: January 2, 2013 Vendor Patch: January 2, 2013 Public Disclosure: January 23, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference:...
Wordpress Developer Formatter CSRF Vulnerability
==================================================================================================================== Exploit Title: Wordpress Developer Formatter CSRF Vulnerability Date: 21/01/13 Author: Junaid Hussain - illSecure Research Group - Contact: [email protected] | Website:...
WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery
WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery Exploit Title: WordPress SolveMedia 1.1.0 CSRF Vulnerability Release Date: 24/01/13 Author: Junaid Hussain - illSecure Research Group - Contact: [email protected] | Website: http://illSecure.com Software Link:...
ImageCMS 4.0.0b - Multiple Vulnerabilities
ImageCMS 4.0.0b - Multiple Vulnerabilities Advisory ID: HTB23132 Product: ImageCMS Vendor: www.imagecms.net Vulnerable Versions: 4.0.0b and probably prior Tested Version: 4.0.0b Vendor Notification: December 5, 2012 Vendor Patch: January 16, 2013 Public Disclosure: January 23, 2013 Vulnerability...
RHEL 5 : JBoss EAP (RHSA-2011:0948)
Updated JBoss Enterprise Application Platform 5.1.1 packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...