Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability

Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...

Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability

Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress PrintFriendly插件'options.php'多个跨站脚本漏洞

Bugtraq ID:65827 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress PrintFriendly 'options.php'不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress PrintFriendly 3.3.7 目前没有详细解决方案提供： http://wordpress.org/plugins/...

CMS Made Simple跨站脚本和HTML注入漏洞

Bugtraq ID:65898 CVE ID:CVE-2014-0334 CMS Made Simple是一款内容管理系统。 CMS Made Simple多个脚本不正确处理多个输入参数，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 CMS Made Simple 目前没有详细解决方案提供： http://www.cmsmadesimple.org/...

SonicWall Backend Server - CS Cross Site Web Vulnerability

Document Title: =============== SonicWall Backend Server - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1100 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2589...

SpagoBI 4.0 - Arbitrary XSS File Upload

Exploit for php platform in category web applications Introduction SpagoBI1 is an Open Source Business Intelligence suite, belonging to the free/open source SpagoWorld initiative, founded and supported by Engineering Group2. It offers a large range of analytical functions, a highly functional...

SpagoBI 4.0 - Arbitrary Cross-Site Scripting Arbitrary File Upload

SpagoBI 4.0 - Arbitrary Cross-Site Scripting Arbitrary File Upload 01. Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE...

WordPress Easy Media Gallery多个跨站脚本漏洞

Bugtraq ID:65804 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress EasyMedia Gallery插件不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress EasyMedia Gallery 1.2.29 目前没有详细解决方案提供： http://wordpress.org/plugins/...

[DVIA] Damn Vulnerable iOS Application

.png Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common...

gpEasy 4.3.x XSS / File Inclusion / Shell Upload

Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...

Facebook Stories Script Insertion

Document Title: =============== Facebook Bug Bounty 12 - Client Side Exception Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1190 Facebook Security ID: 186072579 Release Date: ============= 2014-02-07 Vulnerability Laboratory ID VL-ID...

Publish-It 3.6d - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Publish-It Buffer Overflow Vulnerability 1. Advisory Information Title: Publish-It Buffer Overflow Vulnerability Advisory ID: CORE-2014-0001 Advisory URL:...

Facebook Bug Bounty #12 - CS Exception Vulnerability

Document Title: =============== Facebook Bug Bounty 12 - CS Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1190 Facebook Security ID: 186072579 Release Date: ============= 2014-02-06 Vulnerability Laboratory ID VL-ID:...

Publish-It 3.6d Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Publish-It Buffer Overflow Vulnerability 1. Advisory Information Title: Publish-It Buffer Overflow Vulnerability Advisory ID: CORE-2014-0001 Advisory URL:...

Publish-It Buffer Overflow Vulnerability

Advisory ID Internal CORE-2014-0001 1. Advisory Information Title: Publish-It Buffer Overflow Vulnerability Advisory ID: CORE-2014-0001 Advisory URL:https://www.coresecurity.com/advisories/publish-it-buffer-overflow-vulnerability Date published: 2014-02-05 Date of last update: 2014-02-05 Vendors...

gpEasy v4.3.x CMS - Multiple Web Vulnerabilities

Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...

gpEasy v4.3.x CMS - Multiple Web Vulnerabilities

Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...

Test your Mobile Hacking and Penetration testing Skills with Damn vulnerable iOS app

Smartphones are powerful and popular, with more than thousands of new mobile apps hitting the market everyday. Apps and mobile devices often rely on consumers' data, including private information, photos, and location, that can be vulnerable to data breaches, surveillance and real-world thieves...

Fedora Update for x2goserver FEDORA-2014-0168

Check for the Version of x2goserver OpenVAS Vulnerability Test Fedora Update for x2goserver FEDORA-2014-0168 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Cisco EPC3925 - Persistent Cross-Site Scripting

Exploit Title: Cisco EPC3925 - Persistent Cross Site Scripting Google Dork: N/A Date: 12-11-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.cisco.com Software Link: Not public Version: epc3925-E10-5-v302r125572-130520c Tested on: Cisco EPC3925 CVE: N/A Description The paramet...