NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities

Title: ==== NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-6023, CVE-2015-6024 Date: ==== 03-05-2016 dd/mm/yyyy Vendor: ====== NetComm Wireless is a leading develop...

Django CMS 3.2.3 Cross Site Scripting

Document Title: =============== Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1820 Release Date: ============= 2016-04-19 Vulnerability Laboratory ID VL-ID: ==================================...

Cades (2016Q1) - (id) Multiple SQL Injection Vulnerabilities

Document Title: =============== Cades 2016Q1 - id Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1804 Release Date: ============= 2016-03-29 Vulnerability Laboratory ID VL-ID: ====================================...

eFront Learning CMS 3.6.15.6 Cross Site Scripting

Document Title: =============== eFront Learning 3.6.15.6 CMS - Forum Persistent Title Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID:...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Chamilo LMS Cross Site Scripting

Document Title: =============== Chamilo LMS - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=gNZsQjmtiGI Release Date: ============= 2016-02-17 Vulnerability Laborator...

phpMyBackupPro 2.5 - Remote Command Execution Cross-Site Request Forgery

phpMyBackupPro 2.5 - Remote Command Execution Cross-Site Request Forgery + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPMYBACKUPPRO-v2.5-RCE.txt Vendor: ============================= www.phpmybackuppro.net project site:...

PressePortal NewsAktuell (DPA) - Multiple Vulnerabilities

Document Title: =============== PressePortal NewsAktuell DPA - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1676 Vulnerability Magazine:...

Mobile Drive Free 1.8 Local File Inclusion / File Upload

Document Title: =============== Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1708 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities

Document Title: =============== Mobile Drive Free v1.8 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1708 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

Trend Micro Direct Pass - Bypass & Persistent Vulnerability

Document Title: =============== Trend Micro Direct Pass - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1688 Video: https://www.youtube.com/watch?v=vXCdjK6O-Pc Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1661 Release...

Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

WordPress Booking Calendar Contact Form 1.1.23 Plugin - Unauthenticated SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress appointment-booking-calendar =1.1.23 - Unauthenticated SQL injection Date: 2016-01-26 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez i0akiN...

AccessDiver 4.301 - Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...

POP Peeper 4.0.1 Code Execution

Document Title: =============== POP Peeper 4.0.1 - Persistent Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1657 Release Date: ============= 2015-11-26 Vulnerability Laboratory ID VL-ID: ====================================...

http-vuln-cve2014-3704 NSE Script

Exploits CVE-2014-3704 also known as 'Drupageddon' in Drupal. Versions 7.32 of Drupal core are known to be affected. Vulnerability allows remote attackers to conduct SQL injection attacks via an array containing crafted keys. The script injects new Drupal administrator user via login form and the...

ZenPhoto 1.4.10 - Local File Inclusion

ZenPhoto 1.4.10 - Local File Inclusion + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ZEN-PHOTO-1.4.10-LFI.txt Vendor: ==================== www.zenphoto.org Product: =================== Zenphoto 1.4.10 Vulnerability Type:...

SoundTap 2.27 - Code Execution Vulnerability

Document Title: =============== SoundTap 2.27 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1650 Release Date: ============= 2015-11-22 Vulnerability Laboratory ID VL-ID: ==================================== 1650 Common...

Adobe Premiere Clip iOS - Bypass & Persistent Vulnerability

Document Title: =============== Adobe Premiere Clip iOS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1479 View Video: https://www.youtube.com/watch?v=rGEeW7ypuRE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1478 PSI...

Murgent CMS - SQL Injection Vulnerability

Document Title: =============== Murgent CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1646 Release Date: ============= 2015-11-16 Vulnerability Laboratory ID VL-ID: ==================================== 1646 Common...