Equibase.com HTML Injection

Vulnerability Type: HTML Injection Possible XSS Title: Equibase.com HTML Injection Site Description: Equibase.com is the official source for horse racing results, mobile racing data, statistics as well as all other horse racing and thoroughbred racing information. Details: The page...

Compal ConnectBox - Wireless Passphrase Filter Bypass

Document Title: =============== Compal ConnectBox - Wireless Passphrase Filter Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 1705...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...

PayPal #123 - Security Key Pin Approval & Expire Bypass

Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...

PayPal #123 - Security Key Pin Approval & Expire Bypass

Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...

Netlife Photosuite Pro Cross Site Scripting

Document Title: =============== Netlife Photosuite Pro - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1692 Release Date: ============= 2016-01-29 Vulnerability Laboratory ID VL-ID:...

Threat Outbreak Alert RuleID20792: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43311 First Published: 2016 January 28 20:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20792 may contain the following files: Name |...

eBay Magento Persistent Mail Encoding

Document Title: =============== Ebay Magento Bug Bounty 2 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1203 eBay Inc. Bug Bounty Program ID: EIBBP-26644 Release Date: ============= 2016-01-18 Vulnerability Laboratory ID...

Trend Micro Direct Pass - Bypass & Persistent Vulnerability

Document Title: =============== Trend Micro Direct Pass - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1688 Video: https://www.youtube.com/watch?v=vXCdjK6O-Pc Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1661 Release...

Telegram (API) Cross Site Request Forgery

Document Title: =============== Telegram API - Cross Site Request Forgery Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1648 Release Date: ============= 2016-01-17 Vulnerability Laboratory ID VL-ID: ====================================...

Trend Micro Direct Pass - Bypass & Persistent Vulnerability

Document Title: =============== Trend Micro Direct Pass - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1661 Video: http://www.vulnerability-lab.com/getcontent.php?id=1688 Vulnerability Magazine:...

Ipswitch MOVEit Mobile 1.2.0.962 Cross Site Request Forgery

Profundis Labs - Security Advisory Vulnerablity Title ================== MOVEit Filetransfer Cross Site Request Forgery Vulnerability CVE-2015-7678 Vendor: ======= Ipswitch, Inc http://www.ipswitchft.com Product: ======== MOVEit File Transfer MOVEit is an automated file transfer system that lets...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities

Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez i0 security-lab Software Link:...

Spotify - CSRF & Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...

Oracle - 'HtmlConverter.exe' Local Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ORACLE-HTMLCONVERTER-BUFFER-OVERFLOW.txt Vendor: =============== www.oracle.com Product: ======================================== Java Platform SE 6 U24 HtmlConverter.exe Product Version:...

ntp -- multiple vulnerabilities

Network Time Foundation reports: NTF's NTP Project has been notified of the following low- and medium-severity vulnerabilities that are fixed in ntp-4.2.8p6, released on Tuesday, 19 January 2016: Bug 2948 / CVE-2015-8158: Potential Infinite Loop in ntpq. Reported by Cisco ASIG. Bug 2945 /...

mcart.xls Bitrix Module 6.5.2 - SQL Injection

mcart.xls Bitrix Module 6.5.2 - SQL Injection Advisory ID: HTB23279 Product: mcart.xls Bitrix module Vendor: www.mcart.ru Vulnerable Versions: 6.5.2 and probably prior Tested Version: 6.5.2 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015...

mcart.xls Bitrix Module 6.5.2 - SQL Injection

Exploit for php platform in category web applications Product: mcart.xls Bitrix module Vendor: www.mcart.ru Vulnerable Versions: 6.5.2 and probably prior Tested Version: 6.5.2 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015 Public Disclosur...

Microsoft Internet Explorer NewMessage Protected Mode Sandbox Escape Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...