SourceBans Reflective Cross-Site Scripting Vulnerability

SourceBans is an advanced management system for the Source engine a 3D game engine from the Sourcebans team. The system supports system administrators to set administrative privileges for all users on the server and to terminate games on the server side over the network. A reflective cross-site...

Flowdock API Script Insertion

Document Title: =============== Flowdock API Bug Bounty 3 - Invite Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1574 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID:...

Flowdock API Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Flowdock API Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1574 Vulnerability Magazine:...

My.WiFi USB Drive v1.0 iOS - File Upload Web Vulnerability

Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1589 Release Date: ============= 2015-09-23 Vulnerability Laboratory ID VL-ID: ====================================...

Air Drive Plus 2.4 - Arbitrary File Upload Vulnerability

Exploit for iOS platform in category web applications Document Title: =============== Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability Product & Service Introduction: =============================== Turn your iPhone, iPod touch, and iPad into a wireless disk. Share your files and...

Flowdock API Bug Bounty #2 - Persistent Web Vulnerability

Document Title: =============== Flowdock API Bug Bounty 2 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1572 Vulnerability Magazine:...

Blinksale Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Blinksale Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1449 Release Date: ============= 2015-09-20 Vulnerability Laboratory ID VL-ID: ==================================== 1449...

Blinksale Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Blinksale Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1449 Release Date: ============= 2015-09-19 Vulnerability Laboratory ID VL-ID: ==================================== 1449...

WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection

Exploit Title: WordPress: cp-reservation-calendar 1.1.6 SQLi injection Date: 2015-09-15 Google Dork: Index of /wp-content/plugins/cp-reservation-calendar/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link: https://downloads.wordpress.org/plugin/cp-reservation-calendar.z...

Yahoo Gemini Cross Site Request Forgery

Document Title: =============== Yahoo Bug Bounty 32 - CSRF bulkImport Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1552 Release Date: ============= 2015-09-03 Vulnerability Laboratory ID VL-ID: ==================================== 15...

Paypal Inc - Open Redirect Web Vulnerability

Document Title: =============== Paypal Inc - Open Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1598 Vulnerability Magazine:...

WhatsApp aeration WEB vCard vulnerability affects hundreds of millions of users-vulnerability warning-the black bar safety net

! Security firm Check Point found that, in a world with over seven million users of the social networking application WhatsApp there was a web vulnerability, as many as two billion users suffer from the impact. Vulnerability analysis The Web version of WhatsApp allows users on a PC on line access...

DedeCMS V5.7 SP1 /member/mtypes.php SQL注入漏洞

No description provided by source...

MediaWiki GeSHi Cross-Site Scripting Vulnerability

SyntaxHighlightGeSHi for MediaWiki is a component of a set of free and freely available web-based Wiki engines supporting many different programming languages and file formats, developed and maintained by the Wikimedia Foundation and MediaWiki volunteers. A cross-site scripting vulnerability in...

Yahoo Bug Bounty #32 - CSRF bulkImport Web Vulnerability

Document Title: =============== Yahoo Bug Bounty 32 - CSRF bulkImport Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1552 Release Date: ============= 2015-09-03 Vulnerability Laboratory ID VL-ID: ==================================== 15...

Yahoo Bug Bounty #32 - CSRF bulkImport Web Vulnerability

Document Title: =============== Yahoo Bug Bounty 32 - CSRF bulkImport Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1552 Release Date: ============= 2015-09-03 Vulnerability Laboratory ID VL-ID: ==================================== 15...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

Splunk Enterprise and Splunk Light Web Cross-Site Scripting Vulnerabilities

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Splunk Enterprise and Splunk Light in the...

Electric Sheep Fencing pfsense cross-site scripting vulnerability (CNVD-2015-05672)

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in Electric Sheep Fencing pfsense, which can be exploited by remote attackers to inject arbitrary Web script or HTML...

Beijing Jinhe C6 Collaborative Management Platform Arbitrary File Download Vulnerability

Jinhe OA is developed with asp.net and sqlserver technology and is used by many users. OA system/JHSoft.Web.CustomQuery/FileDownLoad.aspx page due to the FilePath parameter did not do ... /filter, can download any file in any directory, resulting in arbitrary file download vulnerability...