Simple PHP Blog 0.4.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications + Credits: Boumediene KADDOUR AKA sh311c0d3r + Website: http://www.pentestingskills.com Vendor: ====================== http://www.simpleblogphp.com Product: =============================== Simple PHP Blog 0.4.0 Vulnerability Type:...

Edusson (Robotdon) BB Client Side Script Insertion

Document Title: =============== Edusson Robotdon BB - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1871 Release Date: ============= 2016-11-04 Vulnerability Laboratory ID VL-ID:...

Edusson (Robotdon) BB - Client Side Cross Site Vulnerability

Document Title: =============== Edusson Robotdon BB - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1871 Release Date: ============= 2016-11-04 Vulnerability Laboratory ID VL-ID: ====================================...

Silverstripe Theme Newedge - Cross Site Web Vulnerability

A client-side cross site scripting web vulnerability has been discovered in the official Theme Newedge for Silverstripe content management system. Technical Details & Description: ================================ A client-side cross site scripting web vulnerability has been discovered in the...

Flash Operator Panel 2.31.03 - Multiple Web Vulnerabilities

Document Title: =============== Flash Operator Panel 2.31.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1906 Release Date: ============= 2016-10-20 Vulnerability Laboratory ID VL-ID: ===================================...

SUSE-SU-2016:2570-1 Security update for samba

This update for samba provides the following fix: Following security issue was fixed: - CVE-2016-2119: Prevent client-side SMB2 signing downgrade. bsc986869 Also the following bugs were fixed: - Fix possible ctdb crash when opening sockets with htonsIPPROTORAW. bsc969522 - Honor smb.conf socket...

Facebook Ads Pixel - (sendcodebymail) CSRF Vulnerability

Document Title: =============== Facebook Ads Pixel - sendcodebymail CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1768 Release Date: ============= 2016-10-13 Vulnerability Laboratory ID VL-ID: ==================================== 176...

Facebook Ads Pixel - (sendcodebymail) CSRF Vulnerability

Document Title: =============== Facebook Ads Pixel - sendcodebymail CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1768 Release Date: ============= 2016-10-12 Vulnerability Laboratory ID VL-ID: ==================================== 176...

Contenido 4.9.11 Cross Site Scripting

Document Title: =============== Contenido v4.9.11 - Backend Multiple XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1928 Release Date: ============= 2016-10-10 Vulnerability Laboratory ID VL-ID: ====================================...

RealEstate CMS 3.00.50 - Cross Site Scripting Vulnerability

Document Title: =============== RealEstate CMS 3.00.50 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1949 Release Date: ============= 2016-10-06 Vulnerability Laboratory ID VL-ID: ==================================...

RealEstate CMS 3.00.50 - Cross Site Scripting Vulnerability

Document Title: =============== RealEstate CMS 3.00.50 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1949 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ==================================...

Serimux SSH Console Switch 2.4 - Multiple XSS Vulnerabilities

Document Title: =============== Serimux SSH Console Switch 2.4 - Multiple XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1942 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID:...

Cyberoam iview UTM v0.1.2.7 - (Ajax) XSS Web Vulnerability

Document Title: =============== Cyberoam iview UTM v0.1.2.7 - Ajax XSS Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1850 Cyberoam ID: 1059276 Security ID: NCR-2064 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID...

EMC Avamar Data Store and Avamar Virtual Edition Backup Data Read Vulnerability

EMC Avamar is a backup and recovery solution. EMC Avamar Server's ADS and AVE rely on client-side authentication, allowing remote attackers to read backup information using a vulnerable modified client agent...

JCraft / JSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal

Exploit for windows platform in category dos / poc Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725 Version: 0.3 Date: Aug 31st, 2016 Complete Proof of Concept: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725...

JCraft/JSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal

Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725 Version: 0.3 Date: Aug 31st, 2016 Complete Proof of Concept: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40411.zip Tag: jsch...

JCraftJSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal

JCraftJSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725 Version: 0.3 Date: Aug 31st, 2016 Complete Proof of Concept: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725...

CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...

CVE-2016-0903

EMC Avamar Server (ADS/AVE) before 7.3.0-233 uses client-side authentication, allowing remote attackers to spoof clients and read backup data via a modified agent. Affected: Avamar Data Store and Avamar Virtual Edition. Impact: read-backup data. Remediation: upgrade to 7.3.0-233 or later as docum...

CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...