Icecream v4.53 & Pro - File Permission Privilege Escalation

Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-26 Vulnerability Laboratory ID VL-ID: ==================================...

DIGISOL DG-HR1400 1.00.02 Privilege Escalation

Title: ====== Cookie based privilege escalation in DIGISOL DG-HR1400 1.00.02 wireless router. CVE Details: ============ CVE-2017-6896 Reference: ========== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6896 https://vuldb.com/sv/?id.97954...

BlackBoard LMS 9.1 SP14 - (Title) Persistent Vulnerability

Document Title: =============== BlackBoard LMS 9.1 SP14 - Title Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1901 Release Date: ============= 2017-01-10 Vulnerability Laboratory ID VL-ID: ====================================...

Blackboard LMS 9.1 SP14 - (Profile) Persistent Vulnerability

Document Title: =============== Blackboard LMS 9.1 SP14 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1900 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ====================================...

Apache CouchDB 2.0.0 - Local Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/APACHE-COUCHDB-LOCAL-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ================== couchdb.apache.org Product: ============== CouchDB v2.0.0 Apache CouchDB is open...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

CMS EditMe Cross Site Request Forgery Vulnerability

CMS EditMe suffers from cross site request forgery vulnerability that allows for privilege escalation. ===================================================== Exploit Title : CMS EditMe - Privilege Escalate CSRF Vulnerability Date Discovered : 2016-11-04 Affected Products: EditMe - Content Manageme...

Schoolhos CMS v2.29 - Data Siswa SQL injection Vulnerability

Document Title: =============== Schoolhos CMS v2.29 - Data Siswa SQL injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1931 Release Date: ============= 2016-11-07 Vulnerability Laboratory ID VL-ID: ==================================...

Axessh 4.2 - Denial of Service

Axessh 4.2 - Denial of Service + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AXESSH-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ============ www.labf.com Product: ============= Axessh 4.2.2 Axessh is a SSH client...

Aura Video Converter 1.6.3 - DLL Hijacking Exploit

Document Title: =============== Aura Video Converter 1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue

Document Title: =============== FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1938 Release Date: ============= 2016-09-13 Vulnerability Laboratory ID VL-ID: ==================================== 19...

FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue

Document Title: =============== FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1938 Release Date: ============= 2016-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Latest Windows UAC Bypass Permits Code Execution

Less than a month after disclosing a Windows User Account Control bypass, researcher Matt Nelson today published another attack that circumvents the security feature and leaves no traces on the hard disk. This time, the bypass relies on Event Viewer eventvwr.exe, a native Windows feature used to...

Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NAGIOS-NA-v2.2.1-MULTIPLE-CSRF.txt + ISR: ApparitionSec Vendor: =============== www.nagios.co...

Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NAGIOS-NA-v2.2.1-MULTIPLE-CSRF.txt + ISR: ApparitionSec Vendor: =============== www.nagios.com Product: ============================== Nagios Network Analyzer v2.2.1 Netflow...

MediaCoder 0.8.45 - Buffer Overflow Vulnerability

Document Title: =============== MediaCoder 0.8.45 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1883 Release Date: ============= 2016-07-27 Vulnerability Laboratory ID VL-ID: ==================================== 1883...

DornCMS v1.4 - (FileManager) Persistent XSS Vulnerability

Document Title: =============== DornCMS v1.4 - FileManager Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1885 Release Date: ============= 2016-07-25 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload

Document Title: =============== Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1854 Release Date: ============= 2016-06-07 Vulnerability Laboratory ID VL-ID: ==================================== 1854...

Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability

Document Title: =============== Wordpress Levo-Slideshow v2.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1855 Release Date: ============= 2016-06-05 Vulnerability Laboratory ID VL-ID: ====================================...

Mapbox (API) - Filter Bypass & Persistent Vulnerability

Document Title: =============== Mapbox API - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1787 ID: 119802 Release Date: ============= 2016-06-05 Vulnerability Laboratory ID VL-ID:...