AVAST (Shop) #18 - Multiple Client Side XSS Vulnerabilities

Document Title: =============== AVAST Shop 18 - Multiple Client Side XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1635 Release Date: ============= 2016-05-25 Vulnerability Laboratory ID VL-ID: ====================================...

WP Good News Themes Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Wordpress Good News Themes, which can be exploited by remote attackers to inject client-side scripting code...

Squid Denial of Service Vulnerability (CNVD-2016-03063)

Squid full name Squid Cache is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A denial-of-service vulnerability exists in the clientsiderequest.cc file in Squid versions 3.x...

Trend Micro Direct Pass Cross-Site Scripting Vulnerability

Trend Micro DirectPass is a secure online password storage tool that allows you to access, use, and manage all your online passwords by memorizing just one password. A cross-site scripting vulnerability exists in Trend Micro Direct Pass. An attacker can exploit the vulnerability to inject malicio...

Design/Logic Flaw

clientsiderequest.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service crash via crafted Edge Side Includes ESI responses...

UBUNTU-CVE-2016-4555

clientsiderequest.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service crash via crafted Edge Side Includes ESI responses...

CVE-2016-4554

An input validation flaw was found in Squid's mimegetheaderfield function, which is used to search for headers within HTTP requests. An attacker could send an HTTP request from the client side with specially crafted header Host header that bypasses same-origin security protections, causing Squid...

Trend Micro Direct Pass Cross-Site Request Forgery Vulnerability

DirectPass runs as a native control or browser plug-in. A cross-site request forgery vulnerability exists in Trend Micro Direct Pass. An attacker could inject malicious code on the client side of the service bypassing input filters...

WordPress Truemag Theme - Cross Site Scripting

The vulnerability is located in the "s" value of the page module GET method request. Because of this vulnerability remote attackers are able to inject own malicious script codes to the client-side of the online service web-application to compromise user session information or data. Solution Updat...

WordPress Truemag Theme Cross Site Scripting

Document Title: =============== Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-29 Vulnerability Laboratory ID VL-ID:...

Wordpress Truemag Theme - CS Cross Site Web Vulnerability

Document Title: =============== Wordpress Truemag Theme - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-29 Vulnerability Laboratory ID VL-ID: ====================================...

Wordpress Truemag Theme - CS Cross Site Web Vulnerability

Document Title: =============== Wordpress Truemag Theme - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-28 Vulnerability Laboratory ID VL-ID: ====================================...

Oracle Discoverer Viewer BI Open Redirect

Document Title: =============== Oracle Discoverer Viewer BI - Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1667 Oracle ID: S0666670 Release Date: ============= 2016-04-26 Vulnerability Laboratory ID VL-ID:...

Oracle Discoverer Viewer BI - Open Redirect Vulnerability

Document Title: =============== Oracle Discoverer Viewer BI - Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1667 Oracle ID: S0666670 Release Date: ============= 2016-04-26 Vulnerability Laboratory ID VL-ID:...

Oracle Discoverer Viewer BI - Open Redirect Vulnerability

Document Title: =============== Oracle Discoverer Viewer BI - Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1667 Oracle ID: S0666670 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

Negin Group CMS - (v) Multiple Web Vulnerabilities

Document Title: =============== Negin Group CMS - v Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1831 Release Date: ============= 2016-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 1831 Comm...

AVAST #13 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== AVAST 13 - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1623 Video: https://www.youtube.com/watch?v=08Ux7DUIfNo Release Date: ============= 2016-04-18 Vulnerability Laborato...

AVAST (My) #15 - (frontend.exception) CS XSS Vulnerability

Document Title: =============== AVAST My 15 - frontend.exception CS XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1625 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID: ==================================== 1625...

Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities

Document Title: =============== Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1824 Release Date: ============= 2016-04-15 Vulnerability Laboratory ID VL-ID:...

DET - Data Exfiltration Toolkit

DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. The idea was to create a generic toolkit to plug any kind of protocol/service. Slides DET has been presented at BSides Ljubljana on the 9th of March 2016 and the...