5614 matches found
Webgrind 'file' Parameter Cross-Site Scripting Vulnerability
Webgrind is a set of PHP execution time analysis tool . A cross-site scripting vulnerability exists in Webgrind's handling of the 'file' parameter, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to obtain a sensitive...
WordPress Syndication Links Plugin <= 1.0.2 - Cross Site Scripting
This plugin is prone to a DOM cross site scripting vulnerability. This attack is executed as a result of modifying the DOM in the victim’s browser used by the original client side script. Solution Update the plugin...
SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability
Document Title: =============== SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1359 Release Date: ============= 2015-04-23 Vulnerability Laboratory ID VL-ID:...
Kunai - Pwning & Info Gathering via User Browser
Sometimes there is a need to obtain ip address of specific person or perform client-side attacks via user browser. This is what you need in such situations. Kunai is a simple script which collects many informations about a visitor and saves output to file; furthermore, you may try to perform...
Yahoo eMarketing Bug Bounty #31 - Cross Site Vulnerability
Document Title: =============== Yahoo eMarketing Bug Bounty 31 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1491 Yahoo Security ID H1: 55395 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID:...
Yahoo eMarketing Cross Site Scripting
Document Title: =============== Yahoo eMarketing Bug Bounty 31 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1491 Yahoo Security ID H1: 55395 Release Date: ============= 2015-05-07 Vulnerability Laboratory ID VL-ID:...
Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability
Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...
Cisco (Newsroom) - CS Cross Site Scripting Vulnerability
Document Title: =============== Cisco Newsroom - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 Release Date: ============= 2015-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 146...
SonicWall SonicOS 7.5.0.12 & 6.x - Cross Site Vulnerability
Document Title: =============== SonicWall SonicOS 7.5.0.12 & 6.x - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1359 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3447 CVE-ID: ======= CVE-2015-3447 Release Date:...
HomeAdvisor Filter Bypass / Script Insertion
Document Title: =============== HomeAdvisor Bug Bounty 1 - Filter Bypass & Client Side Exception Handling Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID:...
PayPal Cross Site Scripting
Document Title: =============== PayPal Inc Bug Bounty 113 - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Video: http://www.vulnerability-lab.com/getcontent.php?id=1454 View:...
Apple Safari User Tracking Vulnerability
Apple Safari is a popular WEB browser. A vulnerability in Apple Safari client-side certificate matching SSL validation allows attackers to construct malicious WEB sites and track user information...
HotExBilling Manager 73 Cross Site Scripting
Title: ==== HotExBilling Manager Cross-site scripting XSS vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-2781 Date: ==== 12-03-2015 dd/mm/yyyy Vendor: ====== Hotspot Express has been in the billing solution business sinc...
SOL16354 - Multiple JavaSE client-side vulnerabilities
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy...
SOL16317 - OpenSSL vulnerability CVE-2015-0286
Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...
Debian DLA-171-1 : libssh2 security update
Mariusz Ziulek reported that libssh2, a SSH2 client-side library, was reading and using the SSHMSGKEXINIT packet without doing sufficient range checks when negotiating a new SSH session with a remote server. A malicious attacker could man in the middle a real server and cause a client using the...
Websense Data Security Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Websense Data Security block page ------------------------------------------------------------------------ Han Sahin, September 2014...
CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback...
