openSUSE Security Update : clamav-database (openSUSE-2016-451)

This update provides a database refresh for the clamav-database. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 20 security fixes in this release, including: 590275 High CVE-2016-1652: Universal XSS in extension bindings. Credit to anonymous. 589792 High CVE-2016-1653: Out-of-bounds write in V8. Credit to Choongwoo Han. 591785 Medium CVE-2016-1651: Out-of-bounds read in Pdfi...

Cross-Site Scripting in TYPO3 Backend

It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0 Severity: Medium...

Authentication Bypass in TYPO3 CMS

It has been discovered, that TYPO3 CMS is vulnerable to Authentication Bypass. Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Authentication Vulnerability Type: Authentication Bypass Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0 Severity:...

WPN-XM 0.8.6 Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WPNXM-CSRF.txt Vendor: =========== wpn-xm.org Product: ============================================== WPN-XM Serverstack for Windows - Version 0.8.6 WPN-XM is a free and open-source web...

WPN-XM Serverstack 0.8.6 - Cross-Site Request Forgery

Exploit for php platform in category web applications + Credits: hyp3rlinx Vendor: =========== wpn-xm.org Product: ============================================== WPN-XM Serverstack for Windows - Version 0.8.6 WPN-XM is a free and open-source web server solution stack for professional PHP...

WPN-XM Serverstack 0.8.6 - Cross-Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WPNXM-CSRF.txt Vendor: =========== wpn-xm.org Product: ============================================== WPN-XM Serverstack for Windows - Version 0.8.6 WPN-XM is a free and open-source web...

PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities

Exploit for php platform in category web applications Overview ======== Technical Risk: high Likelihood of Exploitation: medium Credits: Discovered and researched by Orwelllabs CVE-Number: N/A DWF: Submited Adivisory URL: http://www.orwelllabs.com/2016/02/planet-ip-surveillance-camera-local.html ...

Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability

Document Title: =============== Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1813 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ====================================...

Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability

Document Title: =============== Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1813 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID: ====================================...

Medium - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Medium published at the 'play' market has multiple vulnerabilities...

WordPress Scoreme Theme Cross Site Scripting

Document Title: =============== Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-04-01 Vulnerability Laboratory ID VL-ID:...

Wordpress Scoreme Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Scoreme Theme - Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1808 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Python v2.7 v1.5.4 iOS - Bypass & Persistent Vulnerability

Document Title: =============== Python v2.7 v1.5.4 iOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1806 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ====================================...

Docker UI 0.10.0 Cross Site Request Forgery

Document Title: =============== Docker UI v0.10.0 - Multiple Client Side Cross Site Request Forgery Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1802 Release Date: ============= 2016-03-28 Vulnerability Laboratory ID VL-ID:...

Python v2.7 v1.5.4 iOS - Bypass & Persistent Vulnerability

Document Title: =============== Python v2.7 v1.5.4 iOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1806 Release Date: ============= 2016-03-30 Vulnerability Laboratory ID VL-ID: ====================================...

Docker UI v0.10.0 - Multiple Persistent Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1803 Release Date: ============= 2016-03-29 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1802 Release Date: ============= 2016-03-28 Vulnerability Laboratory ID VL-ID: ====================================...

Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1802 Release Date: ============= 2016-03-27 Vulnerability Laboratory ID VL-ID: ====================================...

DirectAdmin CP 1.50.0 Cross Site Request Forgery

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://ehsansec.ir/advisories/directadmin-xsrf.txt http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-23 Vulnerability Laboratory ID...