JVN#29141986: Gurunavi App for iOS fails to verify SSL server certificates

Gurunavi App for iOS provided by Gurunavi, Inc. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the...

Important: Red Hat Security Advisory: xen security update

Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...

vBulletin 5.1.2 Unserialize Code Execution

This module exploits a PHP object injection vulnerability in vBulletin 5.1.2 to 5.1.9 Module Options msf use exploit/multi/http/vbulletin/unserialize msf undefinedunserialize show actions ...actions... msf undefinedunserialize set ACTION msf undefinedunserialize show options ...show and set...

actiTIME 2015.2 Multiple Vulnerabilities

Exploit for php platform in category web applications actiTIME 2015.2 Multiple Vulnerabilities Vendor: Actimind, Inc. Product web page: http://www.actitime.com Affected version: 2015.2 Small Team Edition Summary: actiTIME is a web timesheet software. It allows you to enter time spent on different...

CVE-2015-5074 - Arbitrary File Upload In X2Engine Inc. X2Engine

Vulnerability title: Arbitrary File Upload In X2Engine Inc. X2Engine CVE: CVE-2015-5074 Vendor: X2Engine Inc. Product: X2Engine Affected version: 4.2 Fixed version: 5.2 Reported by: Simone Quatrini Details: It was discovered that authenticated users were able to upload files of any type providing...

CVE-2015-5076 - Vulnerability title: Reflective XSS In X2Engine Inc. X2Engine

Vulnerability title: Reflective XSS In X2Engine Inc. X2Engine CVE: CVE-2015-5076 Vendor: X2Engine Inc. Product: X2Engine Affected version: 4.2 Fixed version: 5.2 Reported by: Simone Quatrini Details: It was discovered that the web application was vulnerable to reflective Cross-Site Scripting wher...

RHEL 6 : qemu-kvm-rhev (RHSA-2015:1923)

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Title: XGI Windows VGA Display Manager Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-004 Publication Date: 2015.09.01 Publication URL:...

Important: Red Hat Security Advisory: kvm security update

Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from t...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base scor...

PayPal Inc - Bypass & Session Fixation Vulnerability

Document Title: =============== PayPal Inc - Bypass & Session Fixation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1615 Video: https://www.youtube.com/watch?v=Uyg8xlt-8go Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1509 Release Date:...

PayPal Inc - Bypass & Session Fixation Vulnerability

Document Title: =============== PayPal Inc - Bypass & Session Fixation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1615 Video: https://www.youtube.com/watch?v=Uyg8xlt-8go Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1509 Release Date:...

PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 117 - Session Fixation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1509 EIBBP-31983 P2 Video: http://www.vulnerability-lab.com/getcontent.php?id=1615 Vulnerability Magazine:...

cateia.com XSS vulnerability

Vulnerable URL: http://www.cateia.com/games/games.php?id=28%22%3E%3Csvg/onload=prompt%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2519230 Google Pagerank|...

PayPal Inc - Open URL Redirect Web Vulnerability

Document Title: =============== PayPal Inc - Open URL Redirect Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1611 Video: https://www.youtube.com/watch?v=uI1a7EgHNNU Release Date: ============= 2015-10-01 Vulnerability Laboratory ID VL-ID:...

PayPal Inc - Open URL Redirect Web Vulnerability

Document Title: =============== PayPal Inc - Open URL Redirect Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1611 Video: https://www.youtube.com/watch?v=uI1a7EgHNNU Release Date: ============= 2015-10-01 Vulnerability Laboratory ID VL-ID:...

PayPal Inc Bug Bounty #119 - URL Redirection Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 119 - URL Redirection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1610 Video: http://www.vulnerability-lab.com/getcontent.php?id=1611 Release Date: ============= 2015-10-01...

Mango Automation 2.6.0 - Multiple Vulnerabilities

Mango Automation 2.6.0 - Multiple Vulnerabilities Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a...

Mango Automation 2.6.0 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation i...

Mango Automation 2.6.0 Unprotected Debug Log View

Mango Automation 2.6.0 Unprotected Debug Log View Vulnerability Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a flexible SCADA, HMI And Automation software application tha...