CVE-2018-12903

In CyberArk Endpoint Privilege Manager formerly Viewfinity 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts-DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application...

Magento - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Magento - Filter Bypass & Persistent Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1916 Videos: 4 x Proof of Concept https://www.youtube.com/watch?v=WIDwbSTCLQ https://www.youtube.com/watch?v=zaPRfvNQJzk...

telekom.turtl.co XSS vulnerability

Open Bug Bounty ID: OBB-636625 Description| Value ---|--- Affected Website:| telekom.turtl.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GhostMail - (Filename to Link) Cross Site Web Vulnerability

Document Title: =============== GhostMail - Filename to Link Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1471 Release Date: ============= 2018-06-25 Vulnerability Laboratory ID VL-ID: ====================================...

Magento - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Magento - Filter Bypass & Persistent Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1916 Videos: 4 x Proof of Concept https://www.youtube.com/watch?v=WIDwbSTCLQ https://www.youtube.com/watch?v=zaPRfvNQJzk...

Gitlab -- multiple vulnerabilities

Gitlab reports: Wiki XSS Sanitize gem updates XSS in urlforparams Content injection via username Activity feed publicly displaying internal project names Persistent XSS in charts...

Design/Logic Flaw

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's...

CVE-2018-12538

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's...

PayPal (Notify) - Bypass & Persistent Web Vulnerability

Document Title: =============== PayPal Notify - Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1640 Video: http://www.vulnerability-lab.com/getcontent.php?id=1639 Release Date: ============= 2018-06-22 Vulnerability...

Salesforce RegistrationForm - Persistent Web Vulnerability

Document Title: =============== Salesforce RegistrationForm - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2054 Salesforce Security ID: 219513 Release Date: ============= 2018-06-22 Vulnerability Laboratory ID VL-ID:...

Magento application-side validation and bypass vulnerabilities

Magento is an open source e-commerce web application. An authentication and bypass vulnerability exists on the Magento application side, allowing remote attackers to bypass the authentication process of major magento tier 1 applications and execute malicious persistent scripts within them...

PayPal (Notify) - Bypass & Persistent Web Vulnerability

Document Title: =============== PayPal Notify - Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1640 Video: http://www.vulnerability-lab.com/getcontent.php?id=1639 Release Date: ============= 2018-06-21 Vulnerability...

Salesforce RegistrationForm - Persistent Web Vulnerability

Document Title: =============== Salesforce RegistrationForm - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2054 Salesforce Security ID: 219513 Release Date: ============= 2018-06-21 Vulnerability Laboratory ID VL-ID:...

Magento Products T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento Products T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1919 Release Date: ============= 2018-06-20 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Magento Products T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento Products T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1919 Release Date: ============= 2018-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Red Hat 389-ds-base Competitive Conditions Vulnerability

Red Hat 389-ds-base is an American Red Hat package that includes a Linux directory server and a server administration command-line program. A competitive condition vulnerability exists in the handling of persistent searches in Red Hat 389-ds-base versions prior to 1.4.0.10 and prior to 1.3.8.3. A...

Magento MarketPlace T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento MarketPlace T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1902 Release Date: ============= 2018-06-18 Vulnerability Laboratory ID VL-ID: ====================================...

ReleaseWire - (Groups) Persistent Cross Site Vulnerability

Document Title: =============== ReleaseWire - Groups Persistent Cross Site Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2128 View Video: https://www.youtube.com/watch?v=LFZXKzkmmxA Release Date: ============= 2018-06-18 Vulnerability Laboratory ID VL-I...

Adobe CreativeCloud - (Events ) Persistent Vulnerability

Document Title: =============== Adobe CreativeCloud - Events Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1840 Release Date: ============= 2018-06-18 Vulnerability Laboratory ID VL-ID: ==================================== 1840...

Magento MarketPlace T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento MarketPlace T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1902 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ====================================...