5619 matches found
AirDroid ID - Client Side JSONP Callback Vulnerability
Document Title: =============== AirDroid ID - Client Side JSONP Callback Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1544 Release Date: ============= 2015-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 154...
Design/Logic Flaw
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...
CVE-2015-2731
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...
UBUNTU-CVE-2015-2731
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers remova...
eBay Magento Cross Site Request Forgery
Document Title: =============== Ebay Magento Bug Bounty 12 - Cross Site Request Forgery Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1460 Video: http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video:...
Webgrind 'file' Parameter Cross-Site Scripting Vulnerability
Webgrind is a set of PHP execution time analysis tool . A cross-site scripting vulnerability exists in Webgrind's handling of the 'file' parameter, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to obtain a sensitive...
WordPress Syndication Links Plugin <= 1.0.2 - Cross Site Scripting
This plugin is prone to a DOM cross site scripting vulnerability. This attack is executed as a result of modifying the DOM in the victim’s browser used by the original client side script. Solution Update the plugin...
SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability
Document Title: =============== SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1359 Release Date: ============= 2015-04-23 Vulnerability Laboratory ID VL-ID:...
Kunai - Pwning & Info Gathering via User Browser
Sometimes there is a need to obtain ip address of specific person or perform client-side attacks via user browser. This is what you need in such situations. Kunai is a simple script which collects many informations about a visitor and saves output to file; furthermore, you may try to perform...
Yahoo eMarketing Bug Bounty #31 - Cross Site Vulnerability
Document Title: =============== Yahoo eMarketing Bug Bounty 31 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1491 Yahoo Security ID H1: 55395 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID:...
Yahoo eMarketing Cross Site Scripting
Document Title: =============== Yahoo eMarketing Bug Bounty 31 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1491 Yahoo Security ID H1: 55395 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID:...
Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability
Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...
Cisco (Newsroom) - CS Cross Site Scripting Vulnerability
Document Title: =============== Cisco Newsroom - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 Release Date: ============= 2015-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 146...
SonicWall SonicOS 7.5.0.12 & 6.x - Cross Site Vulnerability
Document Title: =============== SonicWall SonicOS 7.5.0.12 & 6.x - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1359 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3447 CVE-ID: ======= CVE-2015-3447 Release Date:...
HomeAdvisor Filter Bypass / Script Insertion
Document Title: =============== HomeAdvisor Bug Bounty 1 - Filter Bypass & Client Side Exception Handling Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID:...
PayPal Cross Site Scripting
Document Title: =============== PayPal Inc Bug Bounty 113 - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Video: http://www.vulnerability-lab.com/getcontent.php?id=1454 View:...
Apple Safari User Tracking Vulnerability
Apple Safari is a popular WEB browser. A vulnerability in Apple Safari client-side certificate matching SSL validation allows attackers to construct malicious WEB sites and track user information...
HotExBilling Manager 73 Cross Site Scripting
Title: ==== HotExBilling Manager Cross-site scripting XSS vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-2781 Date: ==== 12-03-2015 dd/mm/yyyy Vendor: ====== Hotspot Express has been in the billing solution business sinc...
SOL16354 - Multiple JavaSE client-side vulnerabilities
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy...
SOL16317 - OpenSSL vulnerability CVE-2015-0286
Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...