ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting

Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their homepage: ==================================== ManageEngine...

ManageEngine Asset Explorer 6.1 Cross Site Scripting

Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their homepage: ==================================== ManageEngine...

TCP Vulnerability Haunts Wind River VxWorks Embedded OS

There is a TCP prediction vulnerability in Wind River’s widely deployed VxWorks embedded software that can enable an attacker to disrupt or spoof the TCP connections to and from target devices. VxWorks is an embedded operating system that’s used in a large number of ICS products that are deployed...

TYPO3 Akronymmanager Extension 0.5.0 - SQL Injection Vulnerability

TYPO3 Extension Akronymmanager versions 0.5.0 and below suffer from a remote SQL injection vulnerability. Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and...

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability

Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1523 Video View: https://www.youtube.com/watch?v=sdSzTguFjY0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1522 Release...

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability

Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1523 Video View: https://www.youtube.com/watch?v=sdSzTguFjY0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1522 Release...

Microsoft Internet Explorer ShowSaveFileDialog Protected Mode Sandbox Escape Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the usage o...

Input validation

The Flash broker in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143...

UBUNTU-CVE-2015-3101

The Flash broker in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143...

Heroku Bug Bounty #2 - (API) Re Auth Bypass Vulnerability

Document Title: =============== Heroku Bug Bounty 2 - API Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1323 Video: http://www.vulnerability-lab.com/getcontent.php?id=1336 Vulnerability Magazine:...

CA20150604-01: Security Notice for CA Common Services

-----BEGIN PGP SIGNED MESSAGE----- CA20150604-01: Security Notice for CA Common Services Issued: June 4, 2015 CA Technologies Support is alerting customers to multiple potential risks with products that bundle CA Common Services on Unix/Linux platforms. A local attacker may exploit these...

Improper validation of certificates when using self-signed certificates 1.8.2

Platform: Desktop-clients Versions: 1.8.2, Date: 6/8/2015 Risk level: Medium CVSS v2 Base Score: 6.1 AV:N/AC:H/Au:N/C:C/I:P/A:N CWE: Improper Validation of Certificate with Host Mismatch CWE-297...

1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1504 Releas...

Aruba ClearPass Policy Manager Stored XSS Vulnerability

Exploit for php platform in category web applications =============================================================================== title: ClearPass Policy Manager Stored XSS case id: CM-2014-01 product: Aruba ClearPass Policy Manager vulnerability type: Stored cross-site script severity: Mediu...

HiDisk 2.4 iOS - (currentFolderPath) Persistent Vulnerability

Document Title: =============== HiDisk 2.4 iOS - currentFolderPath Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1496 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ===================================...

Apple iOS 8.0.3 - Silent VCF & iMessage DoS Vulnerability

Document Title: =============== Apple iOS 8.0.3 - Silent VCF & iMessage DoS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1324 Video: http://www.vulnerability-lab.com/getcontent.php?id=1333 Article:...

Aruba ClearPass Policy Manager 6.4 Cross Site Scripting

=============================================================================== title: ClearPass Policy Manager Stored XSS case id: CM-2014-01 product: Aruba ClearPass Policy Manager vulnerability type: Stored cross-site script severity: Medium found: 2014-11-24 by: Cristiano Maruti @cmaruti...

IBM WebSphere Portal Stored Cross-Site Scripting Vulnerability

Exploit for windows platform in category remote exploits IBM WebSphere Portal Stored Cross-Site Scripting Vulnerability CVE-2014-0910 + Author: Filippo Roncari + Target: IBM WebSphere Portal + Version: 7.0, 6.1.5, 6.1.0 + Vendor: http://www.ibm.com + Accessibility: Remote + Severity: Medium + CVE...

HiDisk 2.4 Cross Site Scripting

Document Title: =============== HiDisk 2.4 iOS - currentFolderPath Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1496 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ===================================...

FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)

Google Chrome Releases reports : 37 security fixes in this release, including : - 474029 High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous. - 464552 High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous. - 444927 High CVE-2015-1254: Cross-origin bypass in Editing...