CVE-2024-33305

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "Middle Name" parameter in Create User...

WiFi File Transfer v1.0.8 - Cross Site Scripting Vulnerabilities

Document Title: =============== WiFi File Transfer v1.0.8 - Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2322 Release Date: ============= 2022-10-16 Vulnerability Laboratory ID VL-ID:...

Car Portal Template - (Search) Persistent Web Vulnerability

Document Title: =============== Car Portal Template - Search Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2299 Release Date: ============= 2022-02-08 Vulnerability Laboratory ID VL-ID: ====================================...

ImportExportTools NG 10.0.4 - HTML Injection Vulnerability

Exploit Title: ImportExportTools NG 10.0.4 - HTML Injection Date: 2021-11-05 Exploit Author: Vulnerability Lab Vendor Homepage: https://github.com/thundernest/import-export-tools-ng Software Link: https://addons.thunderbird.net/en-US/thunderbird/addon/importexporttools-ng/ Version: 10.0.4 Tested...

Ultimate POS 4.4 Cross Site Scripting

Document Title: =============== Ultimate POS v4.4 - Products Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2296 Release Date: ============= 2021-10-26 Vulnerability Laboratory ID VL-ID: ====================================...

VestaCP 0.9.8-26 - 'backup' Information Disclosure

Exploit Title: VestaCP 0.9.8-26 - 'backup' Information Disclosure Date: 2020-11-25 Exploit Author: Vulnerability-Lab Vendor Homepage: https://vestacp.com/ Software Link: https://vestacp.com/install/ Version: 0.9.8-26 Document Title: =============== VestaCP v0.9.8-26 - Insufficient Session...

Qik Chat 3.0 Command Injection

Document Title: =============== Qik Chat v3.0 iOS - Name Command Inject Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2247 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 224...

HardDrive 2.1 Arbitrary File Upload

Document Title: =============== HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2221 Release Date: ============= 2020-04-29 Vulnerability Laboratory ID VL-ID: ====================================...

File Explorer 1.4 Information Disclosure

Document Title: =============== File Explorer v1.4 iOS - Information Disclosure Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2220 Release Date: ============= 2020-04-28 Vulnerability Laboratory ID VL-ID:...

Project Open v5.0.3 PMS - Multiple Web Vulnerabilities

Document Title: =============== Project Open v5.0.3 PMS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2225 Release Date: ============= 2020-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 22...

Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC

Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...

INTEL SA 00203 - PoC Exploitation CVE-2018-18098

Document Title: =============== INTEL SA 00203 - PoC Exploitation CVE-2018-18098 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2179 Video: https://www.youtube.com/watch?v=E49kBAouNY Acknowledgements:...

Huawei Backup App - Mobile Reset Session Vulnerability

Document Title: =============== Huawei Backup App - Mobile Reset Session Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1987 Video: https://www.youtube.com/watch?v=YAW9yL1CoW8 Advisory:...

Adobe Systems - Arbitrary Code Injection Vulnerability

Document Title: =============== Adobe Systems - Arbitrary Code Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2120 PSIRT ID: 7873 Vulnerability Magazine:...

GhostMail Filename To Link Script Insertion

Document Title: =============== GhostMail - filename to link POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1471 Release Date: ============= 2018-06-26 Vulnerability Laboratory ID VL-ID: ====================================...

HackRF Circuit Board - New Universal Case for PenTests

Document Title: =============== HackRF Circuit Board - New Universal Case for PenTests References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2134 Download: https://www.vulnerability-lab.com/resources/documents/2134.rar Vulnerability Magazine:...

Ebay Inc - CSRF Exploitation PoC of User Data Delete

Document Title: =============== Ebay Inc - CSRF Exploitation PoC of User Data Delete References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2053 Video: https://www.youtube.com/watch?v=KUenuqImsBs Release Date: ============= 2018-07-06 Vulnerability Laboratory ID VL-ID:...

ReleaseWire - (Groups) Persistent Cross Site Vulnerability

Document Title: =============== ReleaseWire - Groups Persistent Cross Site Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2128 View Video: https://www.youtube.com/watch?v=LFZXKzkmmxA Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-I...

ReleaseWire - (Foldername) Persistent Cross Site Scripting

Document Title: =============== ReleaseWire - Foldername Persistent Cross Site Scripting References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2126 Video: https://www.youtube.com/watch?v=iICPyaitRK8 Release Date: ============= 2018-06-14 Vulnerability Laboratory ID VL-ID:...

Microsoft MSDN - Cross Site Request Forgery Vulnerability

Document Title: =============== Microsoft MSDN - Cross Site Request Forgery Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2125 View Video: https://www.youtube.com/watch?v=xgKYZ4u-6lc Release Date: ============= 2018-06-11 Vulnerability Laboratory ID...