Fireworks VR Show on Cardboard - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Fireworks VR Show on Cardboard published at the 'play' market has multiple vulnerabilities...

Interview Benjamin Kunz Mejri - TechTalk Cairo TV

Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...

Interview Benjamin Kunz Mejri - TechTalk Cairo TV

Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...

dgmcwhzf.com XSS vulnerability

Vulnerable URL: http://www.dgmcwhzf.com/ts/MailShow.asp?deptname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

edmontonfallhomeshow.com Open Redirect vulnerability

Vulnerable URL: http://www.edmontonfallhomeshow.com/Click.aspx?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:23 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 270330...

foreman: reports show/destroy not restricted by host authorization

A flaw was discovered where Satellite failed to properly enforce permissions on the show and delete actions for reports. An authenticated user with show or delete report permissions could use this flaw to view or delete any reports held in Foreman...

xpshop网店系统 xpshop.webui.Show SQL 注入

漏洞位置xpshop.webui.Show: private void GetImgstring pids ProductDB productDB = new ProductDB; DataTable thumbnailImg = productDB.GetThumbnailImgpids; thumbnailImg.TableName = "Products"; base.Response.WriteXpShopJson.DtToJSONthumbnailImg; 这里是问题函数，我就不写怎么跟进来的，就是pageload,等下直接用payload测试就好了，官网demo的。...

show-story.com XSS vulnerability

Open Bug Bounty ID: OBB-112537 Description| Value ---|--- Affected Website:| show-story.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

reitmans.com XSS vulnerability

Vulnerable URL: http://www.reitmans.com/on/demandware.store/Sites-ReitmansCA-Site/default/Search-Show?q=...

Photo Transfer (2) v1.0 iOS - Denial of Service Vulnerability

Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ===================================...

shop.diesel.com XSS vulnerability

Vulnerable URL: http://shop.diesel.com/search-show?q=alert/XSSPOSED/...

WordPress Slider Revolution Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A directory traversal vulnerability exists in...

CollabNet Subversion Edge Management Show LFI

Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via "fileName" parameter of the show action Date: 10.10.2014 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type: Local file...

Microsoft Internet Explorer ShowSaveFileDialog DLL Loading Arbitrary Code Execution Vulnerability

Microsoft Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer suffers from an arbitrary code execution vulnerability in its implementation, which can be exploited by an attacker who places a file in a remotely accessible UNC or WebDAV share location to execute arbitrary...

PT-2015-6523

Name of the Vulnerable Software and Affected Versions XCloner plugin version 3.1.2 for WordPress Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the excl manual parameter in the "xcloner show" page to "wpadmin/plugins.php"...

PT-2015-6419

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.0.5.4p7 Description The issue allows remote authenticated users with monitor permissions to execute arbitrary SQL commands via the server parameter in the "monitor/show sys state.php" file. This can potentially be...

PT-2015-6420

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.0.5.4p7 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests that create...

Criminals Minds - S10 E3 HackInTheBox & Benjamin Mejri

Document Title: =============== Criminals Minds - S10 E3 HackInTheBox & Benjamin Mejri References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1530 View Video: https://www.youtube.com/watch?v=Ny-z5Kp6NFI Release Date: ============= 2015-06-12 Vulnerability Laboratory ID VL-ID:...

PT-2015-6407

Name of the Vulnerable Software and Affected Versions GigPress plugin versions prior to 2.3.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the show artist id or show venue id parameter in an add action in the gigpress.php page to wp-admin/admin.php...

CVE-2015-3325

SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show parameter in the QUERYSTRING to the default URI...