Barracuda EMail Security - Filter Bypass Vulnerability

Document Title: =============== Barracuda EMail Security - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 Download: http://www.vulnerability-lab.com/resources/videos/744.wmv View: http://www.youtube.com/watch?v=r9cwfFta5OY Release Date:...

PG Dating Pro CMS 1.0 Cross Site Scripting / SQL Injection

Title: ====== PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities Date: ===== 2012-10-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=736 VL-ID: ===== 736 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...

Operation High Roller Banked on Fast-Flux Botnet to Steal Millions

A fraud ring that attacked financial transfer systems in an attempt to get at wealthy high-end banking customers used a complicated web of malware and compromised servers in several countries to walk off with an estimated $78 million earlier this year. While the attacks targeted financial systems...

VaM Shop v1.69 - Multiple Web Vulnerabilities

Document Title: =============== VaM Shop v1.69 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=730 Release Date: ============= 2012-10-23 Vulnerability Laboratory ID VL-ID: ==================================== 730 Common...

Omnistar Document Manager v8.0 - Multiple Vulnerabilities

Title: ====== Omnistar Document Manager v8.0 - Multiple Vulnerabilities Date: ===== 2012-10-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=712 VL-ID: ===== 712 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: =============...

vOlk Botnet Framework 4.0 - Multiple Vulnerabilities

vOlk Botnet Framework 4.0 - Multiple Vulnerabilities Title: ====== vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities Date: ===== 2012-10-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=721 VL-ID: ===== 721 Common Vulnerability Scoring System:...

vOlk Botnet Framework 4.0 - Multiple Vulnerabilities

Title: ====== vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities Date: ===== 2012-10-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=721 VL-ID: ===== 721 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: =============...

Switchvox Asterisk 5.1.2 Cross Site Scripting

Title: ====== Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=700 VL-ID: ===== 700 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: =============...

New Iteration of TDSS/TDL-4 Botnet Uses Domain Fluxing to Avoid Detection

A new version of the TDSS/TDL-4 botnet is rapidly growing, primarily because it’s having great success using an evasion technique known as a domain generation algorithm DGA to avoid detection, researchers at Damballa Security revealed today. The algorithm helps the latest version of the botnet...

Parallels Plesk v11.0.9 - Multiple Web Vulnerabilities

Document Title: =============== Parallels Plesk v11.0.9 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=699 Release Date: ============= 2012-08-31 Vulnerability Laboratory ID VL-ID: ==================================== 699...

ActFax Server 4.31 Build 0225 - Local Privilege Escalation

ActFax Server 4.31 Build 0225 - Local Privilege Escalation !/usr/bin/python Title: ActFax 4.31 Local Privilege Escalation Exploit Author: Craig Freyman @cd1zz Discovered: July 10, 2012 Vendor Notified: June 12, 2012 Description: http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html...

Simple Web Server 2.2-rc2 ASLR Bypass Exploit

Exploit for windows platform in category remote exploits use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: Dhruval email protected...

Social Engine 4.2.5 Cross Site Scripting

Title: ====== Social Engine v4.2.5 - Multiple Web Vulnerabilities Date: ===== 2012-07-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=672 VL-ID: ===== 672 Common Vulnerability Scoring System: ==================================== 3 Abstract: ========= A Laboratory...

ME Mobile Application Manager v10 - SQL Vulnerabilities

Document Title: =============== ME Mobile Application Manager v10 - SQL Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=628 Manage Engine Ticket ID: 46119 Release Date: ============= 2012-08-17 Vulnerability Laboratory ID VL-ID:...

Barracuda Application Validation Filter Bypass

Title: ====== Barracuda Appliances - Validation Filter Bypass Vulnerability Date: ===== 2012-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=661 VL-ID: ===== 661 Common Vulnerability Scoring System: ==================================== 5.5 Abstract: ========= The...

Barracuda SSL VPN - Input Filter Bypass Vulnerability

Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...

Barracuda Appliances - Validation Filter Bypass Vulnerability

Document Title: =============== Barracuda Appliances - Validation Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=661 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================...

Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities

Title: ====== Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities Date: ===== 2012-06-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=605 VL-ID: ===== 605 Common Vulnerability Scoring System: ==================================== 5.5 Introduction:...

CLscript CMS v3.0 - Multiple Web Vulnerabilities

Title: ====== CLscript CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-05-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=574 VL-ID: ===== 574 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============= With the...

Android Clickjacking Rootkit Demonstrated

Android Clickjacking Rootkit Demonstrated Mobile security researchers have identified an aspect of Android 4.0.4 Ice Cream Sandwich and earlier models that clickjacking rootkits could exploit. Researchers at NC State in the US have developed a proof-of-concept prototype rootkit that attacks the...