Oracle VirtualBox DoS

Incorrect interrupt handling...

Comodo Internet Security authentication bypass

It's possible to access settings without enteing password if desktop widget is enabled...

Multiple vulnerabilities in RocketTheme themes for WordPress

Hello 3APA3A! Earlier I've wrote to the list about multiple vulnerabilities in multiple themes for WordPress http://seclists.org/fulldisclosure/2012/Dec/236. In that later I've mentioned 16 themes by RocketTheme with Rokbox: Afterburner, Refraction, Solarsentinel, Mixxmag, Iridium, Infuse,...

EMC Avamar: World writable cache files

Product: Avamar backup client for Linux Proberly also Unix but not tested Vendor: EMC http://www.emc.com Tested version: 6.1.100-402 Latest Vendor Notification: December 17, 2012 Vender Patch: None Vender Workaround: quoteworkaround is to run a script at the end of each backup which set the files...

Firefly MediaServer DoS

Crash on TCP/9999 request parsing...

CubeCart 3.0.20 (3.0.x) and lower | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW CubeCart 3.0.20 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...

Siemens SIMATIC S7-1200 controllers DoS

Malformed data to TCP/102 port causes device to crash...

CubeCart 4.4.6 and lower | Multiple SQL Injection Vulnerabilities

OVERVIEW The CubeCart 4.4.6 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root

/Local root exploit for Centrify Deployment Manager v2.1.0.283 local root, Centrify released a fix very quickly - nice vendor response. http://vapid.dhs.org/exploits/centrifylocalr00t.c CVE-2012-6348 12/17/2012 http://vapid.dhs.org/advisories/centrifydeploymentmanagerinsecuretmp2.html Greetings...

Open-Realty CMS 3.x | Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CubeCart 5.0.7 and lower versions | Insecure Backup File Handling

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...

Enterpriser16 LoadBalancer v7.1 - Multiple Web Vulnerabilities

Title: ====== Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities Date: ===== 2012-12-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=785 VL-ID: ===== 785 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= Load...

CA20121220-01: Security Notice for CA IdentityMinder

CA20121220-01: Security Notice for CA IdentityMinder Issued: December 20, 2012 CA Technologies Support is alerting customers to two potential risks in CA IdentityMinder formerly known as CA Identity Manager. Two vulnerabilities exist that can allow a remote attacker to execute arbitrary commands,...

Polycom® HDX® Video End Points Web Management Cross Site Scripting (XSS) vulnerability

Polycom® HDX® Video End Points Web Management Cross Site Scripting XSS vulnerability: - CVE: CVE-2012-4970 - Deloitte Argentina Advisory Code: DTTAR-20120001 - Vendor Status: CONFIRMED - Public Disclosure Date: December, 23rd, 2012. - Vendors Affected: Polycom - http://www.polycom.com/ - Systems...

GnuPG memory corruption

Memory corruption on keyring file import...

CubeCart 4.4.6 and lower | Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a...

[SECURITY] [DSA 2591-1] mahara security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2591-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27, 2012 http://www.debian.org/security/faq -...

CubeCart 5.0.7 and lower | Open URL Redirection Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CubeCart 4.4.6 and lower | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

Multiple vulnerabilities in multiple themes for WordPress

Hello 3APA3A! Some time ago, when I've found vulnerabilities in plugin BuddyPress for WordPress particularly in Affinity BuddyPress theme for it with Rokbox, which I disclosed earlier, I also found multiple vulnerable themes for WP with Rokbox. So I want to warn you about multiple vulnerabilities...

Multiple vulnerabilities in Banana Dance

Advisory ID: HTB23118 Product: Banana Dance Vendor: bananadance.org Vulnerable Versions: B.2.6 and probably prior Tested Version: B.2.6 Vendor Notification: October 3, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: PHP File Inclusion CWE-98, Improper Access Control CWE-284, SQL...

BF, CSRF, AoF and IAA vulnerabilities in MODx Revolution

Hello 3APA3A! I want to warn you about multiple vulnerabilities in MODx Revolution. These are Brute Force, Cross-Site Request Forgery, Abuse of Functionality and Insufficient Anti-automation vulnerabilities in MODx. It's about 2.x Revolution versions of MODx. In 0.x and 1.x Evolution versions of...

elinks authentication relaing

Incorrect user credentials delegation in GSS...

SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability

Title: ====== SonicWall Email Security 7.4.1.x - Persistent Web Vulnerability Date: ===== 2012-12-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=768 VL-ID: ===== 768 Common Vulnerability Scoring System: ==================================== 4.1 Introduction:...

GnuPG 1.4.12 and lower - memory access errors and keyring database corruption

Versions of GnuPG = 1.4.12 are vulnerable to memory access violations and public keyring database corruption when importing public keys that have been manipulated. An OpenPGP key can be fuzzed in such a way that gpg segfaults or has other memory access violations when importing the key. The key m...

[USN-1676-1] AppArmor update

========================================================================== Ubuntu Security Notice USN-1676-1 December 19, 2012 AppArmor update ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

CubeCart 5.x | Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW CubeCart 5.x versions are vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CS and XSS vulnerabilities in BuddyPress for WordPress

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin BuddyPress for WordPress. I've disclosed vulnerabilities in JW Player in June and August including in commercial version JW Player Pro and disclosed vulnerabilities in Rokbox in December. And BuddyPress uses this...

CubeCart 3.0.20 (3.0.x) and lower | Arbitrary File Upload

OVERVIEW CubeCart 3.0.20 and lower versions are vulnerable to Arbitrary File Upload. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...

Open-Realty CMS 3.x | Persistent Cross Site Scripting (XSS) Vulnerability

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Persistent Cross Site Scripting XSS. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Microsoft Internet Explorer 9.x <= Remote Stack Overflow Vulnerability

----------------------------------------------------------------------- Microsoft Internet Explorer 9.x = Remote Stack Overflow Vulnerability ----------------------------------------------------------------------- Author: Jean Pascal Pereira [email protected] Vendor: Microsoft Internet Explorer 9...

Enterpriser16 LoadBalancer multiple security vulnerabilities

Multiple Web interface vulnerabilities...

VMWare vCSA/ESXi multiple security vulnerabilities

Directory traversal, information leakage...

Centrify Deployment Manager symbolic links vulnerability

Insecure temporary files creation...

AppArmor protection bypass

It's possible to bypass protection...

ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability.

ESA-2012-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-060: EMC Data Protection Advisor Information Disclosure Vulnerability. EMC Identifier: ESA-2012-060 CVE Identifier: CVE-2012-4616 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected Products: EMC Data...

Charybdis: Improper assumptions in the server handshake code may lead to a remote crash

Access vector: network Access complexity: low Authentication requirement: none Confidentiality impact: none Integrity impact: none Availability impact: complete CVSSv2 temporal score: 6.4 Exploitability: functional exploit exists Remediation level: official fix Report confidence: confirmed Summar...

DoS vulnerability in Siemens S7-1200 PLCs

Hi all, I have found a DoS vulnerability in the Siemens S7-1200 PLCs. It is present in firmware versions 2 and 3. After an exchange of specially crafted packets to TCP port 102 the PLC shuts down. The red, green and yellow status LEDs start flashing. All outputs are shut off. The device stops...

CubeCart 4.4.6 and lower | Local File Inclusion Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Local File Inclusion. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CubeCart 3.0.20 (3.0.x) and lower | Multiple SQL Injection Vulnerabilities

OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

Persistent XSS vulnerability in WP-UserOnline

Hello 3APA3A! in 2010 I've disclosed multiple vulnerabilities Cross-Site Scripting and Full path disclosure in WordPress plugin WP-UserOnline http://securityvulns.ru/Ydocument162.html, http://seclists.org/fulldisclosure/2010/Jul/8. And recently I've disclosed the exploit for persistent XSS...

Microsoft Internet Explorer stack overflow

Stack overrun on malformed tags sequence...

Polycom HDX Video End Points crossite scripting

Crossite scripting in web management interface...

Firefly MediaServer Multiple Remote DoS Vulnerabilities

Advisory ID: HTB23129 Product: FireFly Mediaserver Vendor: FireFly Vulnerable Versions: 1.0.0.1359 and probably prior Tested Version: 1.0.0.1359 in Windows 7 SP1 Vendor Notification: November 21, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476 CVE...

Charybdis IRC server DoS

assert on client capabilities negotiation...

CubeCart 4.x/5.x | Setup Re-installation Privilege Escalation Vulnerability

OVERVIEW CubeCart 4.x and 5.x versions are vulnerable to Setup Re-installation Privilege Escalation. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup...

Log Analyzer 3.6.0 - Cross Site Scripting Vulnerability

Title: ====== Log Analyzer 3.6.0 - Cross Site Scripting Vulnerability Date: ===== 2012-12-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=792 Vendor:...

[USN-1668-1] Apport update

========================================================================== Ubuntu Security Notice USN-1668-1 December 17, 2012 apport update ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

CubeCart 5.0.7 and lower | Open URL Redirection Vulnerability

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...