Alsovalue CMS 2016Q1 SQL Injection

Document Title: =============== Alsovalue CMS 2016Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1714 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID: ==================================== 171...

Symphony CMS 2.6.3 - Multiple SQL Injections

Exploit for php platform in category web applications ================================================================ Symphony CMS 2.6.3 – Multiple SQL Injection Vulnerabilities ================================================================ Information...

Symphony CMS 2.6.3 - Multiple SQL Injections

================================================================ Symphony CMS 2.6.3 – Multiple SQL Injection Vulnerabilities ================================================================ Information ================================================================ Vulnerability Type : Multiple...

January 2016 OpenSSL Patch Diffie Hellman Safe Primes

The OpenSSL project team today patched two vulnerabilities in the crypto library, one of which is rated high severity. The patches are in new releases of OpenSSL, 1.0.1r and 1.0.2f, and were made along with an enhancement to the strength of the cryptography in a previous mitigation for last year’...

Trend Micro Direct Pass Filter Bypass / CSRF

Document Title: =============== Trend Micro Direct Pass - Filter Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1661 Video: http://www.vulnerability-lab.com/getcontent.php?id=1688 Release Date: =============...

New Era Company CMS SQL Injection

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

los818 CMS 2016 Q1 SQL Injection

Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...

New Era Company CMS - (id) SQL Injection Vulnerability

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

WebMartIndia CMS 2016 Q1 SQL Injection

Document Title: =============== WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1681 Release Date: ============= 2016-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 168...

los818 CMS 2016 Q1 - SQL Injection Web Vulnerability

Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...

Secure Item Hub 1.0 XSS / Code Execution / File Upload

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

los818 CMS 2016 Q1 - SQL Injection Web Vulnerability

Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...

Kleefa v1.7 (IR) - Multiple Web Vulnerabilities

Document Title: =============== Kleefa v1.7 IR - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1677 Release Date: ============= 2016-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 1677 Common...

Kleefa v1.7 (IR) - Multiple Web Vulnerabilities

Document Title: =============== Kleefa v1.7 IR - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1677 Release Date: ============= 2016-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 1677 Common...

Advanced Electron Forum 1.0.9 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-XSS.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ==================================== Advanced Electron Forum v1.0.9 AEF Exploit patched current...

Spotify (Playlists) #2 - Authentication Bypass Vulnerability

Document Title: =============== Spotify Playlists 2 - Authentication Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1663 Release Date: ============= 2016-01-18 Vulnerability Laboratory ID VL-ID: ====================================...

Advanced Electron Forum 1.0.9 Cross Site Request Forgery / Remote File Inclusion

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-RFI.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ================================ Advanced Electron Forum v1.0.9 AEF Exploit patched current version...

Alcatel Lucent Home Device Manager Cross Site Scripting

Document Title: =============== Alcatel Lucent Home Device Manager - Management Console Multiple XSS CVE-Number: =========== CVE-2015-8687 Release Date: ============= 03 Jan 2016 Abstract Advisory Information: ============================= Ugur Cihan Koc discovered ten Reflected XSS vulnerabiliti...

Aeris Calendar 2.1 Buffer Overflow

Document Title: =============== Aeris Calandar v2.1 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1656 Release Date: ============= 2015-12-01 Vulnerability Laboratory ID VL-ID: ==================================== 1656...