Ebay Magento Bug Bounty #6 - Persistent Mail Web Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 6 - Persistent Mail Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1393 EIBBP-31097 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID:...

某政府在用系统通用型SQL注入#3

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入3。 案例如下: http://wssp.jiangxi.gov.cn:8008/outportal/licenseManage/licenseManage.jsp http://117.40.187.175:8008/outportal/licenseManage/licenseManage.jsp http://xzfw.jinxi.gov.cn/outportal/licenseManage/licenseManage.jsp...

OYO File Manager 1.1 - Multiple Web Vulnerabilities

Document Title: =============== OYO File Manager 1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 1493...

Wireless Photo Transfer v3.0 iOS - File Include Vulnerability

Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...

Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities

Document Title: =============== Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1482 Release Date: ============= 2015-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 1482...

TSPB /TSPB/web/pubinfo/pubInfoContent.jsp SQL注入漏洞

No description provided by source...

PDF Converter & Editor 2.1 iOS - File Include Vulnerability

Document Title: =============== PDF Converter & Editor 2.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1480 Release Date: ============= 2015-05-06 Vulnerability Laboratory ID VL-ID: ===================================...

Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability

Document Title: =============== Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1361 Oracle Security ID: S0540289 Tracking ID: S0540289 Reporter ID: 1 2015Q1 Release Date: ============= 2015-05-06...

vPhoto-Album v4.2 iOS - File Upload Web Vulnerability

Document Title: =============== vPhoto-Album v4.2 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 1477...

EasyCTF vulnerable to cross-site scripting

Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a cross-site scripting vulnerability CWE-79 that can be leveraged by an attacker created account. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability...

shop7z九处SQL注入打包

简要描述： shop7z九处SQL注入打包 提交好几次了 虽然很累 不过想到审核的哥们要审核那么多洞 自己的累确实不算什么 详细说明： 案例： http://www.gzsewing.com http://www.125309.com http://www.nm3g.org http://35dianqi.com http://www.ai04.com http://www.longmm.net http://www.99pwan.com http://www.heimawg.com http://www.hzjdpm.cn http://ptwb.net http://5lmm.cn ...

Photo Manager Pro 4.4.0 iOS - File Include Vulnerability

Exploit for iOS platform in category web applications Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability Product & Service Introduction: =============================== Do you have troubles for managing thousands of photos and videos? Do you have any private...

Wifi Drive Pro 1.2 iOS - Local File Inclusion

Wifi Drive Pro 1.2 iOS - Local File Inclusion Document Title: =============== Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1447 Release Date: ============= 2015-03-13 Vulnerability Laboratory ID...

Ebay Xcom Policy CMS / API Cross Site Scripting

Document Title: =============== Ebay Inc Xcom 7 - Policy Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1228 Release Date: ============= 2015-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1228...

CVE-2015-0691

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...

CVE-2015-1652

Microsoft Internet Explorer 6–11 contains a memory-corruption vulnerability exploitable via a crafted web site (remote code execution or memory COI) identified as CVE-2015-1652. The issue is documented as a separate memory-corruption entry from CVE-2015-1666. Multiple connected advisories (CNVD/O...

Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action Cross-Site Request Forgery Vulnerability

Comala Workflows is a WEB-based application. A cross-site request forgery vulnerability exists in Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action, which allows remote attackers to construct malicious URIs, trick users into parsing them, and execute malicious actions in the...

Caught on the web of any user of the password reset vulnerability-vulnerability warning-the black bar safety net

Phone reset password password reset operation is not associated with a specific phone number, the lead can be reset to any phone registration account password. 1. The following url returns a result, you can traverse all the mobile phones registered account: http://api1.fun.tv/ajax/getmobilevcode/...

Cisco Wireless LAN Controller HTML Help System Cross-Site Scripting Vulnerability

HTML help system on Cisco Wireless LAN Controller WLC is a set of HTML help system for use in Wireless LAN Controller WLC devices from Cisco. A cross-site scripting vulnerability exists in the HTML help system on Cisco WLC devices prior to version 8.0. A remote attacker could exploit this...