Chamilo LMS 1.10.2 Cross Site Scripting

Document Title: =============== Chamlio LMS v1.10.2 - Profile Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Release Date: ============= 2016-03-14 Vulnerability Laboratory ID VL-ID: ====================================...

Information Disclosure in extension "UTOPIA" (ics_utopia)

It has been discovered that the extension "UTOPIA" icsutopia is susceptible to Information Disclosure. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:...

AVG Threat Labs - Cross Site Request Forgery Vulnerability

Document Title: =============== AVG Threat Labs - Cross Site Request Forgery Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1660 Release Date: ============= 2016-03-03 Vulnerability Laboratory ID VL-ID: ====================================...

Fing 3.3.0 Persistent Mail Encoding

Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID: ====================================...

GTA Firewall GB-OS 6.2.02 Script Insertion

Document Title: =============== GTA Firewall GB-OS v6.2.02 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1713 Release Date: ============= 2016-02-24 Vulnerability Laboratory ID VL-ID:...

Cross-Site Scripting in TYPO3 component CSS styled content

It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. Component Type: TYPO3 CMS Release Date: February 23, 2016 Vulnerable subcomponent: CSS styled content Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.18 and 7.6.0 to 7.6.3 Severity: Medium...

InstantCoder v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== InstantCoder v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1738 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1738...

Threat Outbreak Alert RuleID21167: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43629 First Published: 2016 February 19 14:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21167 may contain the following files: Name |...

Threat Outbreak Alert RuleID21064: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43594 First Published: 2016 February 18 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21064 may contain the following files: Name |...

Use-after-free during CNAME response processing in resolver

Use-after-free during CNAME response processing in resolver Severity: medium CVE-2016-0746 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9...

Invalid pointer dereference in resolver

Invalid pointer dereference in resolver Severity: medium CVE-2016-0742 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9...

Adobe - Multiple Client Side Cross Site Vulnerabilities

Document Title: =============== Adobe - Multiple Client Side Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1628 PSIRT ID: 4260 / 4261 Release Date: ============= 2016-02-15 Vulnerability Laboratory ID VL-ID:...

Trend Micro Direct Pass -Persistent Web Vulnerability

Document Title: =============== Trend Micro Direct Pass -Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1712 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1712...

Getdpd BB #5 - Persistent Filename Vulnerability

Document Title: =============== Getdpd BB 5 - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1569 ID: 14773 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1711 View Video: https://www.youtube.com/watch?v=V-9lE1L3nq0 Apple Follow-up ID: 631627909 Advisory:...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1711 View Video: https://www.youtube.com/watch?v=V-9lE1L3nq0 Apple Follow-up ID: 631627909 Advisory:...

Mezzanine 4.1.0 Arbitrary File Upload

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MEZZANINE-CMS-ARBITRARY-FILE-UPLOAD.txt Vendor: =================== mezzanine.jupo.org Product: ================ Mezzanine 4.1.0 Mezzanine is an open source CMS built using the python based...

Equibase.com HTML Injection

Vulnerability Type: HTML Injection Possible XSS Title: Equibase.com HTML Injection Site Description: Equibase.com is the official source for horse racing results, mobile racing data, statistics as well as all other horse racing and thoroughbred racing information. Details: The page...

Compal ConnectBox - Wireless Passphrase Filter Bypass

Document Title: =============== Compal ConnectBox - Wireless Passphrase Filter Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 1705...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...