Amazon Linux: Security Advisory (ALAS-2016-679)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-20 Vulnerability Laboratory ID VL-ID: ==================================== 1783...

Gratipay: auto-logout after 20 minutes

Hi, Session is not getting expired even after keeping the application idle for 20 min and after browser closure. Information: JavaScript code can be used by the web application in all or critical pages to automatically logout client sessions after the idle timeout expires, for example, by...

Medium: tomcat7

Issue Overview: A directory traversal vulnerability in RequestUtil.java was discovered which allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web application in a getResource,...

Updated tomcat packages fix security vulnerabilities

Updated tomcat packages fix security vulnerabilities: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 7.x before 7.0.65 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used b...

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace a user during the session.

The vulnerability of the Adobe Connect instant messaging program is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during the session...

Fing 3.3.0 Persistent Mail Encoding

Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID: ====================================...

Node.js HTTP Request Smuggling Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

eFront Learning CMS 3.6.15.6 Cross Site Scripting

Document Title: =============== eFront Learning 3.6.15.6 CMS - Forum Persistent Title Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID:...

WordPress Calculated Fields Form 1.0.x Session Hijacking

Exploit Title: WordPress Calculated Fields Form =1.0.x - Httponly bypass & admin session hijackig. Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/calculated-fields-form/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI:...

Ubiquiti Networks airCRM Cross Site Scripting

Document Title: =============== Ubiquiti Networks Bug Bounty 9 - Invoice Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1728 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID:...

eFront 3.6.15.6 CMS – Attachment Cross Site Vulnerability

Document Title: =============== eFront 3.6.15.6 CMS – Attachment Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1765 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID: ====================================...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability

Document Title: =============== eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ===================================...

Ubiquiti Networks BB #9 - Invoice Persistent Vulnerabilities

Document Title: =============== Ubiquiti Networks BB 9 - Invoice Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1728 http://www.vulnerability-lab.com/getcontent.php?id=1739 Video View: https://www.youtube.com/watch?v=5uiXWxJzN...

iFixIt Guide Cross Site Scripting

Document Title: =============== ifixit Bug Bounty 5 - Guide Search Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1700 Video: http://www.vulnerability-lab.com/getcontent.php?id=1699 Release Date: ============= 2016-02-17...

iFixIt Profile Cross Site Scripting

Document Title: =============== ifixit Bug Bounty 6 -Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1701 Video: http://www.vulnerability-lab.com/getcontent.php?id=1702 Release Date: ============= 2016-02-18 Vulnerability...

Chamilo LMS - Persistent Cross-Site Scripting

Document Title: =============== Chamilo LMS - Persistent Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1727 Video: https://www.youtube.com/watch?v=gNZsQjmtiGI Release Date: ============= 2016-02-17 Vulnerability...

ifixit Bug Bounty #6 - (Profile) Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 6 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1701 Video: http://www.vulnerability-lab.com/getcontent.php?id=1702 View Video:...

MyScript Memo 3.0 Persistent Script Insertion

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...