DataTables 1.10.8 Cross Site Scripting

Information -------------------- Advisory by Netsparker. Name: XSS Vulnerability in DataTables Affected Software : DataTables Affected Versions : 1.10.8 and possibly below Vendor Homepage : https://github.com/DataTables/DataTables Vulnerability Type : Cross-site Scripting Severity : Important...

Amazon Linux: Security Advisory (ALAS-2014-421)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pfSense Multiple Vulnerabilities (Jun 2016)

pfSense is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pfsense:pfsense"; if description...

Splunk Enterprise and Splunk Light Web Cross-Site Scripting Vulnerabilities

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Splunk Enterprise and Splunk Light in the...

CVE-2015-3155

Foreman vulnerable: Foreman before 1.8.1 does not set the secure flag on the _session_id cookie in HTTPS sessions, enabling cookie capture over HTTP. Impact is partial confidentiality loss. Remediation: update to Foreman 1.8.1 or later (fixes the secure flag handling).

Apple Consultants - Client Side Cross Site Vulnerability

Document Title: =============== Apple Consultants - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1533 Apple ID: 624519287 Release Date: ============= 2015-08-12 Vulnerability Laboratory ID VL-ID:...

Apple iTunes U - Persistent POST Inject Web Vulnerability

Document Title: =============== Apple iTunes U - Persistent POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1532 Apple ID: 624515538 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...

Apple Consultants - Client Side Cross Site Vulnerability

Document Title: =============== Apple Consultants - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1533 Apple ID: 624519287 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...

Ebay Magento Bug Bounty #9 - Bypass & Persistent Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 9 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1443 EIBBP-31471 Release Date: ============= 2015-08-05 Vulnerability Laboratory ID VL-ID:...

Axigen Messaging Axigen Mail Server Cross-Site Scripting Vulnerability

Axigen Messaging Axigen Mail Server is a small mail server that can be used in conjunction with services such as SMTP, IMAP and WebMail. Axigen Messaging Axigen Mail Server suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HT...

The Apple APP Store and the iTunes Store exposed high-risk vulnerabilities-vulnerability warning-the black bar safety net

The official Apple App Store and iTunes Store found in a high-risk vulnerability, affecting millions of Apple users. Vulnerability Labs Vulnerability-Lab founder and security researcher Benjamin Kunz Mejri in the Apple App Store shopping list module found in an application-side input validation w...

Apple Patches Remote 'Invoice Vulnerability' in iTunes, App Store

Apple recently patched a serious issue in its App Store and iTunes Store web app that could have let a remote attacker inject malicious script into invoices that come from Apple and subsequently lead to session hijacking, phishing, and redirect. The vulnerability was unearthed in June by Benjamin...

Critical Persistent Injection Vulnerability in Apple App Store and iTunes

A critical vulnerability has been discovered in the official Apple’s App Store and iTunes Store, affecting millions of Apple users. Vulnerability-Lab Founder and security researcher Benjamin Kunz Mejri discovered an Application-Side input validation web vulnerability that actually resides in the...

FoxyCart Bug Bounty #1 - Filter Bypass & Persistent Vulnerability

Document Title: =============== FoxyCart Bug Bounty 1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1451 098bdc9b309783df65044c5abb690dafdd4bcd436c380ae68c924fe37e14b4e0 Release Date: ============= 2015-07-15...

Airdroid iOS, Android & Win 3.1.3 - Persistent Vulnerability

Document Title: =============== Airdroid iOS, Android & Win 3.1.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1543 Release Date: ============= 2015-07-20 Vulnerability Laboratory ID VL-ID: ==================================...

Splunk Enterprise and Splunk Light Input Validation Cross-Site Scripting Vulnerability

Splunk is the engine of machine data. Splunk collects, indexes, and utilizes fast-moving computer data generated by all applications, servers, and devices. Splunk suffers from a cross-site scripting vulnerability that could be exploited by a remote attacker to inject malicious script or HTML code...

Multiple cross-site scripting vulnerabilities in Cisco WebEx Meeting Center (CNVD-2015-04700)

Cisco WebEx Meeting Center is a web-based online meeting product within a suite of WebEx meeting solutions. A cross-site scripting vulnerability in Cisco WebEx Meeting Center allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

CVE-2015-1936

The administrative console in IBM WebSphere Application Server WAS 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter...

CVE-2015-1936

The administrative console in IBM WebSphere Application Server WAS 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter...

FoxyCart Bug Bounty #1 - Bypass & Persistent Vulnerability

Document Title: =============== FoxyCart Bug Bounty 1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1451 098bdc9b309783df65044c5abb690dafdd4bcd436c380ae68c924fe37e14b4e0 Release Date: ============= 2015-07-14...