4202 matches found
Avira Service - Unvalidated CSRF Token Account Hijacking
Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...
Security Advisory - Remote Security Bypass Vulnerability on Huawei Android Devices
Android version 4.1.1 - 4.4.2 is prone to a remote security bypass vulnerability CVE-2013-6272: A vulnerability in the Android system allows an attacker to initiate or terminate arbitrary calls without the callphone permission. After investigation， we confirm that some Huawei smartphone and table...
t. hauck jana webserver 1.0/1.45/1.46 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/699/info The Jana webserver is susceptible to directory traversal attacks using multiple dots in the URL. If the request is made in specific formats, the server will send out files outside of the intended webroot. http...
open auto classifieds <= 1.5.9 - Multiple Vulnerabilities
No description provided by source. MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security...
Security Advisory-Radius Vulnerability on Some Huawei Devices
On huawei Campus Switch, AR, SRG,WLAN devices, the RADIUS component cannot handle malformed RADIUS packets. This vulnerability allows attackers to repeatedly restart the device, causing a DoS attack Vulnerability ID: HWPSIRT-2014-0307. This Vulnerability has been assigned Common Vulnerabilities a...
Barracuda Networks Firewall Bug Bounty #32 - Filter Bypass & Persistent Web Vulnerabilities
Document Title: =============== Barracuda Networks Firewall Bug Bounty 32 - Filter Bypass & Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1069 Barracuda Networks Security ID BNSEC: BNSEC-2069 Release Date: =============...
CVE-2014-1204
creationtimestamp| type| source ---|---|--- 2014-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31578...
ImpressPages CMS 3.6 Multiple Vulnerabilities
ImpressPages CMS version 3.6 suffers from a remote arbitrary file deletion , multiple SQL injection vulnerabilities that can be leveraged to commit cross site scripting attacks. ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability Vendor: ImpressPages UAB Product web page:...
BELL-CVE-2013-2898 CVE-2013-2898 does not affect BellSoft software
Bulletin has no description...
UTA EDU University ENG SQL Injection
Title: ====== UTA EDU University ENG - SQL Injection Vulnerability Date: ===== 2013-08-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=256 VL-ID: ===== 256 Common Vulnerability Scoring System: ==================================== 8.4 Introduction: ============= The...
Dell PacketTrap MSP RMM 6.6.x - Multiple Cross-Site Scripting Vulnerabilities
Dell PacketTrap MSP RMM 6.6.x - Multiple Cross-Site Scripting Vulnerabilities Title: ====== Dell PacketTrap MSP RMM 6.6.x - Multiple Persistent Web Vulnerabilities Date: ===== 2013-07-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=791 VL-ID: ===== 791 Common...
MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities
Document Title: =============== MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1001 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 10...
SonicWALL Scrutinizer 9.5.2 - SQL Injection
SonicWALL Scrutinizer 9.5.2 - SQL Injection Title: ====== Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability Date: ===== 2013-02-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=789 9984: Investigate Vulnerability Lab issues this ticket included tracking the...
Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities
Document Title: =============== Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=874 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=875 View: http://www.youtube.com/watch?v=oKOj0GMf810 Release Date:...
Free Monthly Websites 2.0 - Multiple Vulnerabilities
Title: ====== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities Date: ===== 2013-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=851 VL-ID: ===== 851 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...
CVE-2012-5874
creationtimestamp| type| source ---|---|--- 2012-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23575...
Paypal Bug Bounty #21 - Persistent Encoding Vulnerability
Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...
CVE-2012-2437
creationtimestamp| type| source ---|---|--- 2012-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/38015...
CVE-2012-0547
creationtimestamp| type| source ---|---|--- 2012-08-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20865...
Security Advisory-HTTP Session Management Vulnerability in HTTP Module
Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...