eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability

Document Title: =============== eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ===================================...

iFixIt Guide Cross Site Scripting

Document Title: =============== ifixit Bug Bounty 5 - Guide Search Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1700 Video: http://www.vulnerability-lab.com/getcontent.php?id=1699 Release Date: ============= 2016-02-17...

iFixIt Profile Cross Site Scripting

Document Title: =============== ifixit Bug Bounty 6 -Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1701 Video: http://www.vulnerability-lab.com/getcontent.php?id=1702 Release Date: ============= 2016-02-18 Vulnerability...

Chamilo LMS Cross Site Scripting

Document Title: =============== Chamilo LMS - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=gNZsQjmtiGI Release Date: ============= 2016-02-17 Vulnerability Laborator...

Ebay Cross Site Scripting

Hello all, Description: Persistent DOM based Cross Site Scripting on ebay.com domain. Disclosed to Ebay: January 2015 Fixed: February 2016 Vulnerability location: Every listing Who are able to create: Sellers Same origin policy bypass via postMessage Write-up:...

ifixit Bug Bounty #6 - (Profile) Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 6 - Profile Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1702 Video: https://www.youtube.com/watch?v=lWzoA3hhDk4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1701 Release Date:...

ifixit Bug Bounty #6 - (Profile) Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 6 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1701 Video: http://www.vulnerability-lab.com/getcontent.php?id=1702 View Video:...

ifixit Bug Bounty #6 - (Profile) Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 6 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1701 Video: http://www.vulnerability-lab.com/getcontent.php?id=1702 View Video:...

ifixit Bug Bounty #6 - (Profile) Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 6 - Profile Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1702 Video: https://www.youtube.com/watch?v=lWzoA3hhDk4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1701 Release Date:...

Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Exploit Title :Vesta Control Panel " http://victimserve...

Vesta Control Panel 0.9.8-15 Cross Site Scripting

Exploit Title :Vesta Control Panel " http://victimserver 3. We wait Administrator to read access.log that injected our evil.js 4. We log-in VestaCP via password we changed https:...

Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting

Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting Exploit Title :Vesta Control Panel " http://victimserver 3. We wait Administrator to read access.log that injected our evil.js 4...

Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting

Exploit Title :Vesta Control Panel " http://victimserver 3. We wait Administrator to read access.log that injected our evil.js 4. We log-in VestaCP via password we changed https://victim:8083/ Discov...

ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 5 - Guide Search Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1699 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1698 View Video: https://www.youtube.com/watch?v=KFYECjwuFIE...

ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 5 - Guide Search Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1699 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1698 View Video: https://www.youtube.com/watch?v=KFYECjwuFIE...

ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 5 - Guide Search Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1700 Video: http://www.vulnerability-lab.com/getcontent.php?id=1699 Release Date: ============= 2016-02-17...

Foxit Reader Global setPersistent Memory Error References Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. A security vulnerability exists in the global.setPersistent method of Foxit Reader. global.setPersistent forces a hanging pointer to be released and then reused when saving a global variable. An attacker can exploit this...

MyScript Memo 3.0 Persistent Script Insertion

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...

MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...

JavaScript Anywhere 3.0.4 Script Insertion

Document Title: =============== JavaScript Anywhere v3.0.4 iOS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1709 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID: ====================================...