605 matches found
RelateIQ Mail Encoding Script Code Injection
Document Title: =============== RelateIQ Bug Bounty 1 - Persistent Signup Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1320 Video: http://www.vulnerability-lab.com/getcontent.php?id=1332 Release Date: ============= 2014-12-02 Vulnerabili...
RelateIQ Bug Bounty #1 - Persistent Signup Vulnerability
Document Title: =============== RelateIQ Bug Bounty 1 - Persistent Signup Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1320 Video: http://www.vulnerability-lab.com/getcontent.php?id=1332 Release Date: ============= 2014-12-02 Vulnerabili...
RelateIQ Bug Bounty #1 - Persistent Signup Vulnerability
Document Title: =============== RelateIQ Bug Bounty 1 - Persistent Signup Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1320 Video: http://www.vulnerability-lab.com/getcontent.php?id=1332 Release Date: ============= 2014-12-02 Vulnerabili...
Salesforce.com Compliance Checks
Binary data salesforcecompliancecheck.nbin...
Salesforce.com Settings
Binary data salesforcesettings.nbin...
Dyre Trojan Targeting More than Salesforce.com Credentials
The criminals who unleashed a variant of the Dyre banking Trojan recently may have more up their sleeve than harvesting Salesforce.com credentials. Analysis of a sample conducted by SaaS security company Adallom determined that the new strain of Dyre is targeting large enterprises in addition to...
SALESFORCE Cloud Service Detection
Binary data 8511.prm...
Salesforce Warns Customers of Dyreza Banker Trojan Attacks
Salesforce.com is warning its customers that the Dyreza banker Trojan is now believed to be targeting some of the company’s users. The Trojan, which has the ability to bypass SSL, typically goes after customers of major banks, but seems to be expanding its reach. Dyreza is relatively new among th...
WordPress-to-Lead for Salesforce CRM 1.0.1 - salesforce.php salesforce_form_shortcode Function Error Message H&ling XSS
The Brilliant Web-to-Lead for Salesforce WordPress plugin was affected by a salesforce.php salesforceformshortcode Function Error Message H XSS security vulnerability...
WordPress-to-Lead for Salesforce CRM 1.0.4 - ov_plugin_tools.php textinput Function XSS
The Brilliant Web-to-Lead for Salesforce WordPress plugin was affected by an ovplugintools.php textinput Function XSS security vulnerability...
WordPress-to-Lead for Salesforce CRM 1.0 - salesforce.php Multiple Parameter XSS
The Brilliant Web-to-Lead for Salesforce WordPress plugin was affected by a salesforce.php Multiple Parameter XSS security vulnerability...
WordPress To Lead For Salesforce Plugin <= 1.0.1 - Cross Site Scripting
This plugin is prone to salesforce.php salesforceformshortcode Function Error Message H&ling cross site scripting vulnerability. Solution Update the plugin...
WordPress To Lead For Salesforce Plugin <= 1.0 - Cross Site Scripting
This plugin is prone to a salesforce.php multiple parameter cross site scripting vulnerability. Solution Update the plugin...
WordPress To Lead For Salesforce Plugin <= 1.0.4 - Cross Site Scripting
This plugin is prone to ovplugintools.php textinput function cross site scripting vulnerability. Solution Upgrade this plugin...
Reflected XSS affecting Confluence via Gadgets
Steps to recreate: 1. To view the reflected XSS affecting JIRA, present on the current JIRA installation jira.atlassian.com visit the following link: noformat...
Reflected XSS affecting Confluence via Gadgets
Steps to recreate: 1. To view the reflected XSS affecting JIRA, present on the current JIRA installation jira.atlassian.com visit the following link: noformat...
Reflected XSS affecting Confluence via Gadgets
Steps to recreate: 1. To view the reflected XSS affecting JIRA, present on the current JIRA installation jira.atlassian.com visit the following link: noformat...
Bruteforce Attack via Applinks Servlet
An attacker is able to perform bruteforce attacks via the applinks servlet. There is no captcha protection, nor do accounts get locked out after excessive attempts. The attacker can input a username, and perform bruteforce attacks on the login form. The core issue is that there is no login attemp...