WordPress Truemag Theme - Cross Site Scripting

The vulnerability is located in the "s" value of the page module GET method request. Because of this vulnerability remote attackers are able to inject own malicious script codes to the client-side of the online service web-application to compromise user session information or data. Solution Updat...

Wordpress Truemag Theme - CS Cross Site Web Vulnerability

Document Title: =============== Wordpress Truemag Theme - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-29 Vulnerability Laboratory ID VL-ID: ====================================...

Wordpress Truemag Theme - CS Cross Site Web Vulnerability

Document Title: =============== Wordpress Truemag Theme - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-28 Vulnerability Laboratory ID VL-ID: ====================================...

Oracle Discoverer Viewer BI Open Redirect

Document Title: =============== Oracle Discoverer Viewer BI - Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1667 Oracle ID: S0666670 Release Date: ============= 2016-04-26 Vulnerability Laboratory ID VL-ID:...

Oracle Discoverer Viewer BI - Open Redirect Vulnerability

Document Title: =============== Oracle Discoverer Viewer BI - Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1667 Oracle ID: S0666670 Release Date: ============= 2016-04-26 Vulnerability Laboratory ID VL-ID:...

Oracle Discoverer Viewer BI - Open Redirect Vulnerability

Document Title: =============== Oracle Discoverer Viewer BI - Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1667 Oracle ID: S0666670 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

Negin Group CMS - (v) Multiple Web Vulnerabilities

Document Title: =============== Negin Group CMS - v Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1831 Release Date: ============= 2016-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 1831 Comm...

AVAST #13 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== AVAST 13 - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1623 Video: https://www.youtube.com/watch?v=08Ux7DUIfNo Release Date: ============= 2016-04-18 Vulnerability Laborato...

AVAST (My) #15 - (frontend.exception) CS XSS Vulnerability

Document Title: =============== AVAST My 15 - frontend.exception CS XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1625 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID: ==================================== 1625...

Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities

Document Title: =============== Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1824 Release Date: ============= 2016-04-15 Vulnerability Laboratory ID VL-ID:...

WebSphere Application Server XSS

The vulnerability of the OpenID Connect client-side web application server provided by WebSphere Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using ...

Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities

Document Title: =============== Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1824 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID:...

samba: Server certificates not validated at client side

It was found that Samba did not validate SSL/TLS certificates in certain connections. A man-in-the-middle attacker could use this flaw to spoof a Samba server using a specially crafted SSL/TLS certificate...

GetDataReport - Script to collect information to the client side

Script in PHP+JS for get information of target through a web application, use $SERVER functions and JS functions for get information of our client. Plugin WEBApps in some web applications need to collect information from the client to perform tasks with this plugin will be easier to work with the...

LocalTapiola: Cookie-based client-side denial-of-service to all of the Lähitapiola domains

Cookie-based client-side denial-of-service to all of the Lähitapiola domains Time of detection: 23.2.2016 03:00-04:00 Affected URL: https://www.lahitapiola.fi/cs/Satellite?pagename=LahiTapiola/LTStatus&cookieName=selectedArea&cookieValue=1&backurl=http://www.lahitapiola.fi Description: After the...

Virtual Freer v1.58 - CS Cross Site Scripting Vulnerability

Document Title: =============== Virtual Freer v1.58 - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1812 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ===================================...

WordPress ScoreMe Theme - Cross Site Scripting

Because of this vulnerability in the "s" value of the "index.php" file, remote attackers are able to inject own malicious script codes to the client-side of the affected web-application. Solution Update the theme...

WordPress Scoreme Theme Cross Site Scripting

Document Title: =============== Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID:...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...