Trend Micro (Direct Pass) - Persistent Web Vulnerability

Document Title: =============== Trend Micro Direct Pass - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1717 Trend Micro Security ID: 1-1-1039900153 Release Date: ============= 2016-05-09 Vulnerability Laboratory ID VL-ID:...

EMC RSA Data Loss Prevention Cross-Site Scripting Vulnerability

EMC RSA Data Loss Prevention DLP is a data loss prevention product from EMC Corporation. The product is used to discover and monitor the location and flow of sensitive data such as customer credit card data, employee PII, or company intellectual property and provides features such as user trainin...

Acunetix WVS 10 - Remote Command Execution

Acunetix WVS 10 - Remote Command Execution ''' Acunetix WVS 10 - Remote command execution SYSTEM privilege - Author: Daniele Linguaglossa Overview ========= Acunetix WVS 10 1 is an enterprise web vulnerability scanner developer by Acunetix Inc. Two major flaws exists in the last version of...

Trend Micro Email Spoofing

Document Title: =============== Trend Micro Account - Email Spoofing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1693 Trend Micro ID: 1-1-1035655030 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

Sophos XG Firewall (SF01V) Cross Site Scripting

Document Title: =============== Sophos XG Firewall SF01V - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1734 ID: 5740075 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

Sophos XG Firewall (SF01V) - Persistent Web Vulnerability

Document Title: =============== Sophos XG Firewall SF01V - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1734 ID: 5740075 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

C And C++ For OS Filter Bypass / Script Insertion

Document Title: =============== C & C++ for OS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1825 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID: ====================================...

Trend Micro (Account) - Email Spoofing Web Vulnerability

Document Title: =============== Trend Micro Account - Email Spoofing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1693 Trend Micro ID: 1-1-1035655030 Release Date: ============= 2016-04-24 Vulnerability Laboratory ID VL-ID:...

seznamka.sms.cz XSS vulnerability

Vulnerable URL: http://seznamka.sms.cz/index.php?Pidkategorie=7630soubor=student%2Findex.php%3Fakce%3Dhledej%26akceHledej%3D1%26hlKde1%3D1%26studweb%3D0%26hlText%3D%2527%2522%253E%25%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest che...

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

pfSense Firewall Cross-Site Request Forgery Vulnerability

pfSense is a free, open-source customized version of FreeBSD designed for use as a firewall and router. pfSense suffers from a cross-site request forgery vulnerability. diagbackup.php does not validate all functions sufficiently. Allows an attacker to upload malicious files...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-18 Vulnerability Laboratory ...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-17 Vulnerability Laboratory ...

Remote code execution

Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."...

DotCMS Cross-Site Scripting Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS 3.5 Beta. An attacker can exploit this vulnerability to...

Quicksilver HQ VoHo Concept4E CMS 1.0 SQL Injection

Document Title: =============== Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1816 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID:...

FortiManager / FortiAnalyzer 5.x Script Insertion

Document Title: =============== FortiManager & FortiAnalyzer 5.x Appliance Application - filename Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1687 Fortinet PSIRT ID: 1624561 Release Date: ============= 2016-04-04...

Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability

Document Title: =============== Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-03 Vulnerability Laboratory ID VL-ID: ====================================...

DirectAdmin CP 1.50.0 Cross Site Request Forgery

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://ehsansec.ir/advisories/directadmin-xsrf.txt http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-23 Vulnerability Laboratory ID...