Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1802 Release Date: ============= 2016-03-28 Vulnerability Laboratory ID VL-ID: ====================================...

Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1802 Release Date: ============= 2016-03-27 Vulnerability Laboratory ID VL-ID: ====================================...

DirectAdmin CP 1.50.0 Cross Site Request Forgery

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://ehsansec.ir/advisories/directadmin-xsrf.txt http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-23 Vulnerability Laboratory ID...

openSUSE Security Update : shotwell (openSUSE-2016-845)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services Also contains all upstream bug fixes and improvements in the current upstream version. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : 4813 (4813-1) (deprecated)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services This plugin has been renamed to openSUSE-2016-844.nasl, plugin ID 90108. %NASLMINLEVEL 999999 C Tenable Network Security, Inc...

Chamilo LMS 1.10.2 Cross Site Scripting

Document Title: =============== Chamlio LMS v1.10.2 - Profile Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Release Date: ============= 2016-03-14 Vulnerability Laboratory ID VL-ID: ====================================...

Information Disclosure in extension "UTOPIA" (ics_utopia)

It has been discovered that the extension "UTOPIA" icsutopia is susceptible to Information Disclosure. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:...

AVG Threat Labs - Cross Site Request Forgery Vulnerability

Document Title: =============== AVG Threat Labs - Cross Site Request Forgery Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1660 Release Date: ============= 2016-03-03 Vulnerability Laboratory ID VL-ID: ====================================...

Schneider Electric SBO AS - Multiple Vulnerabilities

Schneider Electric SBO AS - Multiple Vulnerabilities Exploit Title: Schneider Electric SBO / AS Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.schneider-electric.com Versions Reported: Automation Server Series AS, AS-P, v1.7 and prior CVE-ID: CVE-2016-2278 About...

WP Good News Themes Cross Site Scripting

Document Title: =============== WP Good News Themes - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID:...

Fing 3.3.0 Persistent Mail Encoding

Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID: ====================================...

GTA Firewall GB-OS 6.2.02 Script Insertion

Document Title: =============== GTA Firewall GB-OS v6.2.02 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1713 Release Date: ============= 2016-02-24 Vulnerability Laboratory ID VL-ID:...

RozBlog Weblog Service Cross Site Request Forgery / Cross Site Scripting

Document Title: =============== RozBlog Weblog Service - Authentication Bypass / Cross Site Request Forgery / Cross Site Scripting References Source: ==================== http://ehsansec.ir/advisories/rozblog-xsrf-xss-bypass.txt Release Date: ============= 2016-02-23 Product & Service Introductio...

Cross-Site Scripting in TYPO3 component CSS styled content

It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. Component Type: TYPO3 CMS Release Date: February 23, 2016 Vulnerable subcomponent: CSS styled content Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.18 and 7.6.0 to 7.6.3 Severity: Medium...

SamenBlog Weblog Service Cross Site Request Forgery / Cross Site Scripting

Document Title: =============== SamenBlog Weblog Service - Cross Site Request Forgery / Cross Site Scripting References Source: ==================== http://ehsansec.ir/advisories/samenblog-xsrf-xss.txt Release Date: ============= 2016-02-20 Product & Service Introduction:...

InstantCoder v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== InstantCoder v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1738 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1738...

Threat Outbreak Alert RuleID21167: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43629 First Published: 2016 February 19 14:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21167 may contain the following files: Name |...

Adobe Cross Site Scripting / Open Redirect

Document Title: =============== Adobe - Multiple Client Side Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1628 PSIRT ID: 4260 / 4261 Release Date: ============= 2016-02-15 Vulnerability Laboratory ID VL-ID:...

Chamilo LMS Cross Site Scripting

Document Title: =============== Chamilo LMS - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=gNZsQjmtiGI Release Date: ============= 2016-02-17 Vulnerability Laborator...

Threat Outbreak Alert RuleID21064: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43594 First Published: 2016 February 18 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21064 may contain the following files: Name |...