Security Research

Wednesday, 28 November 2007by Adrian PastorJan Fry

0 

Cross-site Scriptiang (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script

The F5 Networks FirePass 4100 SSL VPN has been identified as vulnerable to Cross-Site Scripting (XSS) attacks through the "my.activation.php3" scri ....

Monday, 26 November 2007by Jan FryAdrian Pastor

0 

BEA Plumtree portal internal hostname disclosure vulnerability

The BEA Plumtree portal exhibits a vulnerability that leads to the disclosure of internal hostnames, as the server's internal hostname is embedded ....

Thursday, 15 November 2007by Adrian Pastor

0 

XSS on Liferay Portal Enterprise 4.1.1 login page ('login' parameter)

The Liferay Portal login page is susceptible to Cross-Site Scripting (XSS) attacks via the "login" field, specifically through the "/c/portal/login ....