jQuery jui_filter_rules PHP Code Execution Vulnerability

The jQuery juifilterrules parsing library suffers from an arbitrary php remote code execution vulnerability. PHP Code Execution in juifilterrules Parsing Library ====================================================== Researcher: Timo Schmid Description =========== juifilterrules1 is a jQuery plug...

SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability

Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

VeryPhoto v3.0 iOS - Script Code Inject Web Vulnerability

Document Title: =============== VeryPhoto v3.0 iOS - Script Code Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1401 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Dynamics CRM 2013 SP1 Cross Site Scripting Vulnerability

Microsoft Dynamics CRM 2013 SP1 suffers from self-inflicted cross site scripting vulnerability. Product: Microsoft Dynamics CRM 2013 SP1 Vendor: Microsoft Corporation Vulnerable Versions: 6.1.1.132 DB 6.1.1.132 and probably prior Tested Version: 6.1.1.132 DB 6.1.1.132 Advisory Publication: Decemb...

Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation Vulnerability

Document Title: =============== Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1385 Release Date: ============= 2014-12-19 Vulnerability Laboratory ID VL-ID:...

E-Journal CMS (ID) - Multiple Web Vulnerabilities

Document Title: =============== E-Journal CMS ID - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1380 Release Date: ============= 2014-12-17 Vulnerability Laboratory ID VL-ID: ==================================== 1380 Commo...

iWifi for Chat v1.1 iOS - Denial of Service Vulnerability

Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

targets-ipv6-map4to6 NSE Script

This script runs in the pre-scanning phase to map IPv4 addresses onto IPv6 networks and add them to the scan queue. The technique is more general than what is technically termed "IPv4-mapped IPv6 addresses." The lower 4 bytes of the IPv6 network address are replaced with the 4 bytes of IPv4...

Gogs Markdown Renderer Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 XSS in Gogs Markdown Renderer ============================= Researcher: Timo Schmid Description =========== GogsGo Git Service is a painless self-hosted Git Service written in Go. taken from 1 It is very similiar to the github hosting plattform...

SunRPC Data Connection Evasion Technique

SunRPC protocol is vulnerable to evasion techniques over its data connection. An attacker may try to evade inspection via an unauthorized data connection. Successful evasion may result in a remote code execution...

iFileExplorer v6.51 iOS - File Include Web Vulnerability

Document Title: =============== iFileExplorer v6.51 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1345 Release Date: ============= 2014-10-22 Vulnerability Laboratory ID VL-ID: ====================================...

Google Android Browser - Bypass& Persistent Vulnerability

Document Title: =============== Google Android Browser - Bypass& Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1337 View: https://www.youtube.com/watch?v=Erva1rfd3dc Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

HTTP Commander v3.1.9 - CS Exception Vulnerability

Document Title: =============== HTTP Commander v3.1.9 - CS Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1329 Release Date: ============= 2014-10-01 Vulnerability Laboratory ID VL-ID: ==================================== 1329...

Briefcase 4.0 iOS - Code Execution & File Include Vulnerability

No description provided by source. Document Title: =============== Briefcase 4.0 iOS - Code Execution & File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1319 Release Date: ============= 2014-09-11 Vulnerability Laboratory ID...

Details Disclosed on Patched Webmin Vulnerability

The University of Texas information security office yesterday disclosed the details on a critical vulnerability in Webmin that was patched in May, days after it was reported. The bug in the UNIX remote management tool provided remote root access to a host server. Authenticated users would then be...

Immunity Canvas: ADOBE_FLASH_COPYPIXELSTOBYTEARRAY

Name| adobeflashcopypixelstobytearray ---|--- CVE| CVE-2014-0556 Exploit Pack| CANVAS Description| adobeflashcopypixelstobytearray Notes| CVE Name: CVE-2014-0556 VENDOR: Adobe Notes: This module exploits a heap based buffer overflow on Adobe Flash Player when copying data from a BitmapData object...

Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1281 Video: https://www.youtube.com/watch?v=9gBtJ5tyRgI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1280 Vulnerabili...

Microsoft: Exploiting XSS with clickjacking

Little Insight: Click jacking just hide-the-button-and-follow-the-mouse. also know as UI Redressing its just playing with the UI of the victim application by clicking and mouse event . In this post we'll show UI-Redressing attack and how an attacker may trigger an unexploitable XSS flaw in an...

Barracuda Networks WSF - Filter Bypass & Persistent Bug

Document Title: =============== Barracuda Networks WSF - Filter Bypass & Persistent Bug References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1205 View: http://www.youtube.com/watch?v=1D9PS4bW8VM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=749 Release Date:...

Barracuda Networks WSF - Filter Bypass & Persistent Bug

Document Title: =============== Barracuda Networks WSF - Filter Bypass & Persistent Bug References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1205 View: http://www.youtube.com/watch?v=1D9PS4bW8VM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=749 Release Date:...