DEBIAN-CVE-2015-2665

Cross-site scripting XSS vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Ebay Magento Bug Bounty #12 - CSRF Web Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 12 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1460 Video: http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video: https://www.youtube.com/watch?v=x7uaABfxxU...

CVE-2015-1741

Microsoft Internet Explorer versions 9–11 are affected by CVE-2015-1741, a memory corruption vulnerability triggered by a crafted web page that can allow remote code execution or cause a denial of service. The issue is documented as a separate vulnerability from CVE-2015-1752. Public references i...

CVE-2015-1740

Microsoft Internet Explorer 6–11 is affected by CVE-2015-1740, a memory corruption vulnerability exploitable via a crafted web site that can allow remote code execution or a denial of service. The affected product is Internet Explorer (versions 6 through 11); the underlying cause is memory corrup...

SysAid Help Desk .jsp File Upload Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. An arbitrary file upload vulnerability in the SysAid Help Desk ChangePhoto.jsp script allows remote attackers to submit a special .jsp file and execute it...

Pasworld - 'detail.php' Blind SQL Injection

========================================================= + Title :- Pasworld detail.php Blind Sql Injection Vulnerability + Date :- 5 - June - 2015 + Vendor Homepage: :- http://main.pasworld.co.th/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...

Multiple HTML Injection Vulnerabilities in Dolibarr

Dolibarr is a WEB-based open source ERP and CRM system . Dolibarr suffers from multiple HTML injection vulnerabilities due to the program failing to adequately filter user-submitted input. The vulnerabilities could be exploited to allow an attacker to execute arbitrary script code in the context ...

PentestBox - Portable Penetration Testing Distribution for Windows Environments

PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 50% of penetration testing distributions users uses windows. So it provides an efficient platform for Penetration Testing on windows platform. Check out demo video: Easy ...

Hive 2.0 RC2 XSS / Code Execution / SQL Injection

| Title : Hive v2.0 RC2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : "Powered by DigitalHive" | Tested on: windows 8.1 Français V.Pro | Bug : Stop Script | Download : http:///www.digitalhive.com ======================================= Stop SCript working :...

Ebay Magento Bug Bounty #6 - Persistent Mail Web Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 6 - Persistent Mail Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1393 EIBBP-31097 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID:...

某政府在用系统通用型SQL注入#3

简要描述： rt 详细说明： 某政府在用系统通用型SQL注入3。 案例如下: http://wssp.jiangxi.gov.cn:8008/outportal/licenseManage/licenseManage.jsp http://117.40.187.175:8008/outportal/licenseManage/licenseManage.jsp http://xzfw.jinxi.gov.cn/outportal/licenseManage/licenseManage.jsp...

OYO File Manager 1.1 - Multiple Web Vulnerabilities

Document Title: =============== OYO File Manager 1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 1493...

Wireless Photo Transfer v3.0 iOS - File Include Vulnerability

Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...

Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities

Document Title: =============== Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1482 Release Date: ============= 2015-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 1482...

TSPB /TSPB/web/pubinfo/pubInfoContent.jsp SQL注入漏洞

No description provided by source...

PDF Converter & Editor 2.1 iOS - File Include Vulnerability

Document Title: =============== PDF Converter & Editor 2.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1480 Release Date: ============= 2015-05-06 Vulnerability Laboratory ID VL-ID: ===================================...

Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability

Document Title: =============== Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1361 Oracle Security ID: S0540289 Tracking ID: S0540289 Reporter ID: 1 2015Q1 Release Date: ============= 2015-05-06...

vPhoto-Album v4.2 iOS - File Upload Web Vulnerability

Document Title: =============== vPhoto-Album v4.2 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 1477...

EasyCTF vulnerable to cross-site scripting

Overview EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a cross-site scripting vulnerability CWE-79 that can be leveraged by an attacker created account. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability...