ASP.NET Core HTTP Header Injection Vulnerability

ASP.NET Core is a new open source and cross-platform framework for building modern cloud-based applications connected to the Internet such as web applications, Internet of Things IoT applications, and mobile back-end applications. An HTTP header injection vulnerability exists in ASP.NET Core...

CVE-2016-7284

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-7287

CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...

WHMCS Addon VMPanel 2.7.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

VMPanel 2.7.4 SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

VMPanel 2.7.4 - SQL Injection Web Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12641)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting attack vulnerability exists in IBM Jazz Reporting Service that stems from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary scripts in an...

VMPanel 2.7.4 - SQL Injection Web Vulnerability

Document Title: =============== VMPanel 2.7.4 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2022 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 2022 Comm...

VMPanel 2.7.4 - SQL Injection Web Vulnerability

Document Title: =============== VMPanel 2.7.4 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2022 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 2022 Comm...

shape.hu XSS vulnerability

Vulnerable URL: http://www.shape.hu/keres/%22%3E%3Csvg%20onload=alert'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1332224 VIP website status:| No Check shape.hu SSL connection:| Grade: A...

Multiple cross-site scripting vulnerabilities in phpMyAdmin (CNVD-2016-11906)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. Multiple cross-site scripting vulnerabilities exist ...

Cross-site scripting vulnerability in Drupal plugin lyris

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal plugin lyris. The program fails to filter user-supplied input, allowing an attacker to construct a malicious web...

Burden TMA 2.1.1 Cross Site Scripting

Document Title: =============== Burden TMA v2.1.1 - Task Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1998 Release Date: ============= 2016-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 199...

Burden TMA v2.1.1 - (Task) Persistent Web Vulnerability

Document Title: =============== Burden TMA v2.1.1 - Task Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1998 Release Date: ============= 2016-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 199...

Koken 0.22.7 / 0.22.11 Cross Site Scripting

| \ | | / | | | | | | | | | | | | ' \ / \ \ / / | | | | || | | | | | | / |/ ,|| ||// || Document Title: =============== Koken 0.22.7 & 0.22.11 Multiple Web Vulnerabilities Credits & Authors: ================== TaurusOmar - @TaurusOmar [email protected] taurusomar.buhosec.com Release...

U.S. Dept Of Defense: Reflected XSS on a DoD website

A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @juliocesar was able to demonstrate this vulnerability by crafting a...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

EditMe CMS - Cross-Site Request Forgery Add Admin Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...