jamesblondltd.co.nz XSS vulnerability

Vulnerable URL: http://www.jamesblondltd.co.nz/booking/step1 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 356748 Google Pagerank| 0 VIP website status:|...

neptunebiotechltd.com XSS vulnerability

Vulnerable URL: http://neptunebiotechltd.com/ANTIBIOTICS.php?productname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

JVN#55545372: EC-CUBE plugin BbAdminViewsControl vulnerable to SQL injection

BbAdminViewsControl from BOKUBLOCK CO., LTD. is an EC-CUBE plugin. BbAdminViewsControl contains an SQL injection vulnerability CWE-89. Impact A logged in attacker may execute SQL statements. According to the developer, this vulnerability affects availability of the server that EC-CUBE resides, bu...

Acunetix WVS 10 Local Privilege Escalation

''' ======================================================================== Acunetix WVS 10 - from guest to Sytem Local privilege escalation CVE: CVE-2015-4027 Author: me Daniele Linguaglossa Affected Product: Acunetix WVS 10 Exploit: Local privilege escalation Vendor: Acunetix ltd Remote: No...

Apache Flex BlazeDS 4.7.1 SSRF

CVE-2015-5255: SSRF vulnerability in Apache Flex BlazeDS 4.7.1 Severity: Important Vendor: The Apache Software Foundation Versions Affected: BlazeDS 4.7.0 and 4.7.1 Description: The code in BlazeDS to deserialize AMF XML datatypes allows so-called SSRF Attacks Server Side Request Forgery in which...

Qualsoft Systems - Auth ByPass Vulnerability

Exploit for php platform in category web applications Title : Qualsoft Systems - AddNewsDetails.php Auth ByPass Vulnerability Dork : intext:Powered by Qualsoft Systems Pvt. Ltd demo : http://www.dnyanada.net/ firt you go here: localhost/AddNewsDetails.php after you go here:...

Zenario CMS 7.0.7c Remote Code Execution

Zenario CMS 7.0.7c Remote Code Execution Vulnerability Vendor: Tribal Ltd. Product web page: http://www.zenar.io Affected version: = 7.0.7c and 7.1.0 svn Summary: Zenario is a web-based content management system for sites with one or many languages. It's designed to grow with your site, adding...

Zenario CMS 7.0.7c Remote Code Execution Vulnerability

Zenario CMS versions 7.0.7c and 7.1.0 and below suffer from a remote code execution vulnerability. Zenario CMS 7.0.7c Remote Code Execution Vulnerability Vendor: Tribal Ltd. Product web page: http://www.zenar.io Affected version: = 7.0.7c and 7.1.0 svn Summary: Zenario is a web-based content...

Zenario CMS 7.0.7c Remote Code Execution Vulnerability

Summary Zenario is a web-based content management system for sites with one or many languages. It's designed to grow with your site, adding extranet, online database and custom functionality when you need it. Description The vulnerability is caused due to the improper verification of uploaded fil...

TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow

!/usr/bin/perl TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow Exploit Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download: http://globalsa.teco.com.tw/supportdownload.aspx?KindID=9 Affected version: 3.51 and 3.40 Summary: SG2 Client is a...

TECO SG2 LAD Client 3.51 - .gen Overwrite Buffer Overflow (SEH)

TECO SG2 LAD Client 3.51 - .gen Overwrite Buffer Overflow SEH !/usr/bin/perl TECO SG2 LAD Client 3.51 SEH Overwrite Buffer Overflow Exploit Vendor: TECO Electric and Machinery Co., Ltd. Product web page: http://www.teco-group.eu Download: http://globalsa.teco.com.tw/supportdownload.aspx?KindID=9...

JVN#25323093: pWebManager vulnerable to OS command injection

pWebManager provided by PC-EGG Co.,Ltd. contains an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed on the server by a user logged in with editor permissions. Solution Update the Software Update to the latest version according to the information provided ...

JVN#97278546: EC-CUBE vulnerable to cross-site request forgery

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page, arbitrary PHP code may be executed on the server. Solution Update or apply the patch Update to the...

JVN#20355129: niconico App for iOS fails to verify SSL server certificates

niconico App for iOS provided by DWANGO Co., Ltd. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the...

Threat Outbreak Alert RuleID17973: Email Messages Distributing Malicious Software on September 14, 2015

Medium Alert ID: 40992 First Published: 2015 September 15 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17973 may contain the following files: Name ...

Wolf CMS - Arbitrary File Upload Execution

Wolf CMS - Arbitrary File Upload Execution Exploit Title : Wolf CMS 0.8.2 Arbitrary File Upload To Command Execution Reported Date : 05-May-2015 Fixed Date : 10-August-2015 Exploit Author : Narendra Bhati CVE ID : CVE-2015-6567 , CVE-2015-6568 Contact: Facebook :...

Dogma India dogmaindia CMS Authentication Bypass

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

Serenity Media Player 3.2.3 Buffer Overflow Exploit

Exploit for windows platform in category local exploits Serenity is a playlist based audio player for Windows. It features a clean and simple interface with minimal overhead.Formats supported are limited only by CODECs and drivers installed on the machine SEH Local buffer overflow in Serenity Aud...

Creation Infoways SQL Injection Vulnerability

Exploit for php platform in category web applications +++++++++++++++ + + Exploit Title : Creation Infoways SQL Injection Vulnerability + + Exploit Author : Ashiyane Digital Security Team + + Google Dork : "Designed By Creation Infoways Pvt. Ltd." inurl:pid= + + Date: 2015 August 09 + + Tested On...

Bettercap - New MITM Framework

Document Title: =============== Bettercap - New MITM Framework References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1565 Download: https://www.vulnerability-lab.com/resources/documents/1565.pdf Release Date: ============= 2015-08-09 Vulnerability Laboratory ID VL-ID:...