ZAPms v1.42 CMS - Client Side Cross Site Scripting Web Vulnerability

Document Title: =============== ZAPms v1.42 CMS - CS Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1112 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ===================================...

Contexis CMS 1.0 Cross Site Scripting

CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: G...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Feng Office 2.3.2-rc Cross Site Scripting

Advisory ID: HTB23174 Product: Feng Office Vendor: Secure Data SRL Vulnerable Versions: 2.3.2-rc and probably prior Tested Version: 2.3.2-rc Advisory Publication: September 18, 2013 without technical details Vendor Notification: September 18, 2013 Public Disclosure: October 9, 2013 Vulnerability...

Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass

Document Title: =============== Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1104 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: https://www.youtube.com/watch?v=6e-hvglQdg Release Date:...

SQL Injection in vtiger CRM

Advisory ID: HTB23168 Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

WebAssist PowerCMS PHP - Multiple Web Vulnerabilities

Document Title: =============== WebAssist PowerCMS PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1098 Release Date: ============= 2013-09-27 Vulnerability Laboratory ID VL-ID: ==================================== 1098...

SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)

It has been discovered that the extension "RealURL: speaking paths for TYPO3" realurl is vulnerable to SQL-Injection. Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.12.6 and below...

Apple iOS7 iPhone5 iPad2 - Pass Code Bypass Vulnerability

Document Title: =============== Apple iOS7 iPhone5 iPad2 - Pass Code Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1092 View: http://www.youtube.com/watch?v=71k7szhokg Release Date: ============= 2013-09-24 Vulnerability Laboratory ID VL-ID:...

Facebook - Private Message (Attachment ID) Vulnerability

Document Title: =============== Facebook - Private Message Attachment ID Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1087 View: http://www.youtube.com/watch?v=azzZ7KDMMKw Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID:...

Joomla JVideoClip Blind SQL Injection

================================================================================ Joomla Component comjvideoclip cid|uid|id Blind SQL Injection / SQL Injection ================================================================================ Author : SixP4ck3r Email & msn : [email protected] Da...

WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload

Document Title: =============== WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1080 Release Date: ============= 2013-09-16 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability

Document Title: =============== Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=945 Release Date: ============= 2013-09-08 Vulnerability Laboratory ID VL-ID: ====================================...

Wiz 5.0.3 User Mode Write Access Violation Vulnerability

Wiz version 5.0.3 suffers from a user mode write access violation vulnerability. Title: User Mode Write Access Violation in Wiz 5.0.3 Severity: Medium History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez, Miguel Angel de Castro Simon Organization:...

PWStore 2010.8.30.0 Cross Site Scripting / Denial Of Service

PWStore version 2010.8.30.0 suffers from cross site scripting and denial of service vulnerabilities. - RealPentesting Advisory - Title: MULTIPLE VULNERABILITIES IN PWSTORE 2010.8.30.0 Severity: Medium History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez,...

libtiff <= 3.9.5 integer overflow bug

+----------------------------------------------------+ | XADV-2013001 libtiff = 3.9.5 integer overflow bug | +----------------------------------------------------+ vulnerable versions: - libtiff 3.9.5 = - libtiff 3.6.0 not vulnerable versions: - libtiff 4.0.3 - libtiff 4.0.2 - libtiff 4.0.1 -...

DeWeS 0.4.2 - Directory Traversal

Advisory ID: HTB23167 Product: DeWeS web server Twilight CMS Vendor: Strata Technologies LLC Vulnerable Versions: 0.4.2 and probably prior Tested Version: 0.4.2 Vendor Notification: July 24, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Path Traversal CWE-22 CVE Reference:...

CVE-2013-3186

The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly implement the Integrity Access Level aka IL protection mechanism, which allows remote...

CVE-2013-3186

The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly implement the Integrity Access Level aka IL protection mechanism, which allows remote...