FreeBSD : redmine -- multiple vulnerabilities (0e0385d1-9ed5-11e5-8f5c-002590263bf5)

Redmine reports : Mass-assignment vulnerability that would allow an attacker to bypass part of the security checks. Persistent XSS vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databa...

Unspecified Vulnerability in Sensio Labs Symfony

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security vulnerability exists in the...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

IP.Board 4.1.4.x - Persistent 跨站脚本 漏洞

No description provided by source...

WordPress Users Ultra Plugin 1.5.50 - Persistent 跨站脚本

No description provided by source...

WordPress Plugin Users Ultra 1.5.50 - Persistent Cross-Site Scripting

Exploit Title: WordPress Users Ultra Plugin Persistence XSS Discovery Date: 2015/10/20 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/...

WordPress Plugin Users Ultra 1.5.50 - Persistent Cross-Site Scripting

WordPress Plugin Users Ultra 1.5.50 - Persistent Cross-Site Scripting Exploit Title: WordPress Users Ultra Plugin Persistence XSS Discovery Date: 2015/10/20 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage:...

WordPress Users Ultra Plugin 1.5.50 - Persistent XSS

Because of this vulnerability, an attacker can include JavaScript code in package name or description. Solution Upgrade the plugin...

Invision Power Board 4.1.4.x - Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: IP.Board Persistent XSS Vulnerability Date: 29/10/2015 Software Link: https://www.invisionpower.com/buy Software version : 4.1.4.x Exploit Author: Mehdi Alouache Contact: email protected Category: webapps 1. Description Any...

Invision Power Board (IP.Board) 4.1.4.x - Persistent Cross-Site Scripting

Exploit Title: IP.Board Persistent XSS Vulnerability Date: 29/10/2015 Software Link: https://www.invisionpower.com/buy Software version : 4.1.4.x Exploit Author: Mehdi Alouache Contact: [email protected] Category: webapps 1. Description Any registered user can execute remote...

thehandcraftedcardcompany.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-109968 Description| Value ---|--- Affected Website:| thehandcraftedcardcompany.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting

Application: WP-Client Version: 3.8.7 Author: Pier-Luc Maltais from COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== One plugin configures multiple areas of your WordPress installation and allows the site Administrator...

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting Application: WP-Client Version: 3.8.7 Author: Pier-Luc Maltais from COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== One plugin configures multiple are...

LinkedIn Cross Site Scripting

LinkedIn social network affected by Persistent Cross-Site Scripting vulnerabilityXSS patched in less than 3 hours ========================= I. VULNERABILITY ------------------------- LinkedIn social network is affected by Persistent Cross-Site Scripting stored XSS vulnerability. II. BACKGROUND...

Adobe Premiere Clip 1.1.1 Filter Bypass

Document Title: =============== Adobe Premiere Clip v1.1.1 iOS - cid:x Filter Bypass & Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1478 PSIRT ID: 3721 Video: http://www.vulnerability-lab.com/getcontent.php?id=1479...

WordPress Users Ultra 1.5.50 Unrestricted File Upload

Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link:...

Adobe Premiere Clip iOS - Bypass & Persistent Vulnerability

Document Title: =============== Adobe Premiere Clip iOS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1479 View Video: https://www.youtube.com/watch?v=rGEeW7ypuRE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1478 PSI...

Adobe Premiere Clip iOS - Bypass & Persistent Vulnerability

Document Title: =============== Adobe Premiere Clip iOS - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1479 View Video: https://www.youtube.com/watch?v=rGEeW7ypuRE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1478 PSI...

Adobe Premiere Clip v1.1.1 iOS - Persistent Vulnerability

Document Title: =============== Adobe Premiere Clip v1.1.1 iOS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1478 PSIRT ID: 3721 Video: http://www.vulnerability-lab.com/getcontent.php?id=1479 Bulletin:...