WikkaWiki 1.3.2 - Multiple Vulnerabilities

WikkaWiki 1.3.2 - Multiple Vulnerabilities ---------------------------------------------------- WikkaWiki Query" 142. UPDATE ".$this-GetConfigValue'tableprefix'."users 143. SET email = '".mysqlrealescapestring$email."', 144. doubleclickedit = '".mysqlrealescapestring$doubleclickedit."', 145...

kernel: net: improve sequence number generation

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

iGuard Biometric Access Control - Multiple Vulnerabilities

Title: ====== iGuard Biometric Access Control - Multiple Vulnerabilities Date: ===== 2011-11-08 References: =========== 2011/Q3-4 URL: http://vulnerability-lab.com/getcontent.php?id=104 VL-ID: ===== 104 Introduction: ============= Each iGuard Biometric / Smart Card Security Appliance has a built-...

Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution

?php / ------------------------------------------------------------------------------ Support Incident Tracker = 3.65 translate.php Remote Code Execution Exploit ------------------------------------------------------------------------------ author...............: Egidio Romano aka EgiX...

SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=286 CNNVD-201112-148 Release Date: ============= 2011-11-17 Vulnerability Laboratory ID VL-ID:...

SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Aventail v7.2.16 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=286 CNNVD-201112-148 Release Date: ============= 2011-11-17 Vulnerability Laboratory ID VL-ID:...

Skype Cross Site Scripting

Title: ====== Skype Vendor Website - Cross Site Scripting Vulnerability Date: ===== 2011-11-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=309 VL-ID: ===== 309 Introduction: ============= Skype is a software application that allows users to make voice and video call...

Skype Vendor Website - Cross Site Scripting Vulnerability

Document Title: =============== Skype Vendor Website - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=309 Release Date: ============= 2011-11-12 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Infoblox NetMRI 6.2.1 Cross Site Scripting

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-004 - Original release date: November 10, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade a...

Joomla ALFContact 1.9.3 Cross Site Scripting

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-003 - Original release date: Nomvember 9, 2011 - Discovered by: Jose Carlos de Arriba Sr Security Analyst at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade at...

Oracle GlassFish Server Invalid Username Cross Site Scripting (CVE-2011-2260)

A persistent cross-site scripting vulnerability has been reported in Oracle GlassFish Server. The vulnerability is due to insufficient input validation of username values. A remote attacker may exploit this vulnerability by sending a specially crafted POST request to an affected server. Successfu...

Barracuda Link Balancer 330 - Input Validation Vulnerability

Document Title: =============== Barracuda Link Balancer 330 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=33 Barracuda - Link Balancer 330 Appliance - Firmware v1.3.2.005 & older versions Release Date: =============...

Prosieben Community 2011 - Persistent Web Vulnerability

Document Title: =============== Prosieben Community 2011 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=306 Release Date: ============= 2011-10-30 Vulnerability Laboratory ID VL-ID: ==================================== 306...

Barracuda Link Balancer 330 - Input Validation Vulnerability

Document Title: =============== Barracuda Link Balancer 330 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=33 Barracuda - Link Balancer 330 Appliance - Firmware v1.3.2.005 & older versions Release Date: =============...

Cross Site Request Forgery - Deleting User's Dashboards

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL:...

kernel: net: improve sequence number generation

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

Huawei Website - Multiple Web Vulnerabilities

Document Title: =============== Huawei Website - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=291 Release Date: ============= 2011-10-08 Vulnerability Laboratory ID VL-ID: ==================================== 291 Product &...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

SonicWall NSA 4500 Cross Site Scripting / Session Hijacking

While pentesting a a WIFI network on a customer, we found some vulnerabilities in the SonicWall NSA 4500. You can find details here: http://www.pentest.es/vulnssonicpoint.txt -------------------------------------------------- Title: ====== SonicWall products with incompatible MAC spoofing...

SonicWALL - SessId Cookie Brute Force Admin Session Hijacking

SonicWALL - SessId Cookie Brute Force Admin Session Hijacking source: https://www.securityfocus.com/bid/49930/info SonicWall NSA 4500 is prone to an HTML-injection vulnerability and a session-hijacking vulnerability. Exploiting these issues can allow an attacker to hijack a user's session and gai...