Wordpress Truemag Theme - CS Cross Site Web Vulnerability

Document Title: =============== Wordpress Truemag Theme - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-29 Vulnerability Laboratory ID VL-ID: ====================================...

New Decryptor Unlocks CryptXXX Ransomware

When exploits kits, in particular Angler, spread ransomware infections, people get nervous. The latest strain to appear in the virulent Angler kit is CryptXXX, which researchers at Proofpoint and Fox IT tied to the same group dropping old-school Reveton ransomware and Bedep click-fraud malware...

NVV Ticket Krauth ATM - (NaN) Devide by Zero Vulnerability

Document Title: =============== NVV Ticket Krauth ATM - NaN Devide by Zero Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1837 View Video: https://www.youtube.com/watch?v=iIT4gcboKjk Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID...

APT Threat Targets Tibetans, Journalists and Human Rights Workers

Tibetans, journalists and human rights workers in Hong Kong and Taiwan have been targeted in an APT campaign that makes use of Microsoft Rich Text File RTF documents to compromise computers. Researchers say it’s a new strategy by attackers in an ongoing advanced persistent threat that dates back ...

Spotify ArtistExplorer BB #1 - Cross Site Script Vulnerability

Document Title: =============== Spotify ArtistExplorer BB 1 - Cross Site Script Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1662 Release Date: ============= 2016-04-16 Vulnerability Laboratory ID VL-ID:...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.2.11-i486-1slack14.1.txz: Upgraded. This update fixes the security issues known as "badlock" or "sadlock", which may all...

OpenWGA Content Manager 7.1.9 User-Agent HTTP Header XSS Vulnerability

Summary OpenWGA is an advanced open source java based enterprise CMS platform featuring real WYSIWYG, a state of the art CMS IDE and more. Description OpenWGA suffers from a cross-site scripting vulnerability when input passed via the User-Agent HTTP header is not properly sanitized before being...

OpenWGA Developer Studio 3.1.0 OpenDialog Arbitrary Code Execution

Summary The OpenWGA Developer Studio packages an OpenWGA CMS server together with all necessary development and deployment tools to create, develop, deploy, share and maintain your OpenWGA CMS applications. Description The application suffers from an arbitrary code execution vulnerability when...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 182...

Hikvision Digital Video Recorder Cross-Site Request Forgery

Summary Hikvision is the global leader of video surveillance products and solutions, manufactures a wide range of top-quality, reliable, and professional solutions. Description The application interface allows users to perform certain actions via HTTP requests without performing any validity chec...

SocialEngine 4.8.9 - SQL Injection

Exploit for php platform in category web applications Product: SocialEngine Vendor: Webligo Vulnerable Versions: 4.8.9 and probably prior Tested Version: 4.8.9 Advisory Publication: December 21, 2015 without technical details Vendor Notification: December 21, 2015 Public Disclosure: April 6, 2016...

Apple iOS 9.3.1 Passcode Bypass

Document Title: =============== Apple iOS 9.3.1 iPhone 6S & iPhone Plus - 3D Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID:...

Asbru Web Content Management System v9.2.7 Multiple Vulnerabilities

Summary Ready to use, full-featured, database-driven web content management system CMS with integrated community, databases, e-commerce and statistics modules for creating, publishing and managing rich and user-friendly Internet, Extranet and Intranet websites. Description Asbru WCM suffers from...

virtual-lab.sk XSS vulnerability

Vulnerable URL: http://virtual-lab.sk/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=A5GEOSG Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Fireworks Lab - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Fireworks Lab published at the 'play' market has multiple vulnerabilities...

Learn Lab - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Learn Lab published at the 'play' market has multiple vulnerabilities...

Lab Rats Guess Pics New - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Lab Rats Guess Pics New published at the 'play' market has multiple vulnerabilities...

Alchemists: Lab Equipment - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Alchemists: Lab Equipment published at the 'play' market has multiple vulnerabilities...

Visage Lab – face retouch - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Visage Lab – face retouch published at the 'play' market has multiple vulnerabilities...

Photo Lab Picture Editor FX - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Photo Lab Picture Editor FX published at the 'play' market has multiple vulnerabilities...