GetDataReport - Script to collect information to the client side

Script in PHP+JS for get information of target through a web application, use $SERVER functions and JS functions for get information of our client. Plugin WEBApps in some web applications need to collect information from the client to perform tasks with this plugin will be easier to work with the...

LocalTapiola: Cookie-based client-side denial-of-service to all of the Lähitapiola domains

Cookie-based client-side denial-of-service to all of the Lähitapiola domains Time of detection: 23.2.2016 03:00-04:00 Affected URL: https://www.lahitapiola.fi/cs/Satellite?pagename=LahiTapiola/LTStatus&cookieName=selectedArea&cookieValue=1&backurl=http://www.lahitapiola.fi Description: After the...

Virtual Freer v1.58 - CS Cross Site Scripting Vulnerability

Document Title: =============== Virtual Freer v1.58 - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1812 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ===================================...

WordPress ScoreMe Theme - Cross Site Scripting

Because of this vulnerability in the "s" value of the "index.php" file, remote attackers are able to inject own malicious script codes to the client-side of the affected web-application. Solution Update the theme...

WordPress Scoreme Theme Cross Site Scripting

Document Title: =============== Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID:...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Template Injection

Overview Affected versions of jsrender are susceptible to a remote code execution vulnerability when used with server delivered client-side tempates which dynamically embed user input. Proof of Concept for x!=1?constructor.constructor"return arguments.callee.caller":y10 :data /for function...

B.A.S C2Box Security Bypass Vulnerability

B.A.S C2Box is a financial management solution for managing domestic and cross-border payment processes from B.A.S France. A security vulnerability exists in B.A.S C2Box 4.0.0 r19171 and prior versions, which stems from a failure to protect server-side code when performing authentication on the...

Docker UI v0.10.0 - Multiple Persistent Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1803 Release Date: ============= 2016-03-29 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Shopify: XSS on https://app.shopify.com/

DESCRIPTION =========== It has been identified that the page located at https://app.shopify.com/ is prone to cross-site scripting issues. Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts also commonly referred to as a malicious...

Jsprime - A JavaScript Static Security Analysis Tool

Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for applications, be it on the web or on the mobile; be it on client-side, be it on the server side...

Uber: Reflected XSS on developer.uber.com via Angular template injection

developer.uber.com is vulnerable to reflected XSS via Angular template injection. The following url demonstrates the root issue using a trivial payload: https://developer.uber.com/docs/deep-linking?q=wrtz77 If you view the rendered source of the resulting page, you'll find the string 'wrtz49',...

Gratipay: auto-logout after 20 minutes

Hi, Session is not getting expired even after keeping the application idle for 20 min and after browser closure. Information: JavaScript code can be used by the web application in all or critical pages to automatically logout client sessions after the idle timeout expires, for example, by...

Xero: stored xss issue in folder name on go.xero.com/Docs/Folders

A client-side validation bypass issue was reported, which allowed XSS characters to be used for naming folders in https://go.xero.com. This provided a XSS attack vector against users of an Organization. A malicious, authenticated insider within an organisation may have used this attack vector to...

Citrix ICA Virtual Channels Overview

This article provides details of the design, functionality, and usage of the Citrix ICA Virtual Channels and focuses on the Citrix XenApp Plug-ins/Receiverfor Windows Target Audience Application developers, Citrixserver administrators, and help desk personnel. What are ICA Virtual Channels? A lar...

Adobe (Edex) - CS Cross Site & Redirect Vulnerability

Document Title: =============== Adobe Edex - CS Cross Site & Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1633 PSIRT ID: 4274 Video: https://www.youtube.com/watch?v=OHgnIQp0WU0 Release Date: ============= 2016-03-09 Vulnerabilit...

Fedora 23 : subversion-1.9.3-1.fc23 (2015-afdb0e8aaa)

This update includes the latest stable release of Apache Subversion, version 1.9.3. User-visible changes: Client-side bugfixes: svn: fix possible crash in auth credentials cache cleanup: avoid unneeded memory growth during pristine cleanup diff: fix crash when repository is on server root fix...

Adobe (Edex) - Client Side Cross Site Scripting Vulnerability

Document Title: =============== Adobe Edex - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1630 PSIRT ID: 4261 Release Date: ============= 2016-03-01 Vulnerability Laboratory ID VL-ID:...

WP Good News Themes - CS Cross Site Web Vulnerability

Document Title: =============== WP Good News Themes - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 1771...