Barracuda Bug Bounty #36 Firewall - Client Side Exception Handling Web Vulnerability

Document Title: =============== Barracuda Bug Bounty 36 Firewall - Client Side Exception Handling Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1102 Barracuda Networks Security ID BNSEC: BNSEC-2398...

Barracuda Networks Bug Bounty #31 Firewall - Persistent Access Policy Vulnerability

Document Title: =============== Barracuda Networks Bug Bounty 31 Firewall - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-2...

CVE-2014-1223

Telligent Evolution (controlpanel/loading.aspx) is affected by an XSS vulnerability due to improper filtering of the msg parameter. Versions affected include before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651. An attacker can inject arbitrary script/HTML via the msg...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Telekom Bug Bounty #12 - File Include Web Vulnerability

Document Title: =============== Telekom Bug Bounty 12 - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1178 Release Date: ============= 2014-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 117...

JORJWEB Ltda (all versions) - SQL Injection Vulnerability

Document Title: =============== JORJWEB Ltda all versions - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1212 Release Date: ============= 2014-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 12...

WiFiles HD v1.3 iOS - File Include Web Vulnerability

Document Title: =============== WiFiles HD v1.3 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1214 Release Date: ============= 2014-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 1214...

CVE-2014-0286

CVE-2014-0286 affects Microsoft Internet Explorer 6–11. The vulnerability is a memory corruption issue triggered by visiting a crafted web site, enabling remote code execution or memory corruption. Public exploits are known, and this vulnerability is distinct from CVE-2014-0275 and CVE-2014-0285....

CVE-2014-0278

Technical details about CVE-2014-0278 are not provided in the supplied documents; only general statements about Internet Explorer memory corruption are present. Monitor for updates in official advisories.

CVE-2014-0277

CVE-2014-0277 concerns memory corruption in Microsoft Internet Explorer 8 introduced by crafted webpages that can allow remote code execution or a denial of service. Connected sources describe multiple memory corruption and overflow-style vulnerabilities in Internet Explorer that can be exploited...

jDisk (stickto) v2.0.3 iOS - Multiple Web Vulnerabilities

Document Title: =============== jDisk stickto v2.0.3 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1196 Release Date: ============= 2014-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 11...

WiFi Camera Roll 1.2 iOS - Multiple Vulnerabilities

Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-08 Vulnerability Laboratory ID VL-ID: ====================================...

Facebook Stories Script Insertion

Document Title: =============== Facebook Bug Bounty 12 - Client Side Exception Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1190 Facebook Security ID: 186072579 Release Date: ============= 2014-02-07 Vulnerability Laboratory ID VL-ID...

WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-07 Vulnerability Laboratory ID VL-ID: ====================================...

WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1192 Release Date: ============= 2014-02-07 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-4887

SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter...

DEBIAN-CVE-2012-6620

Multiple cross-site scripting XSS vulnerabilities in the 1 tasks and 2 search views in Horde Kronolith H4 before 3.0.17 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431...

yxcms各处存在xss可getshell

简要描述： 求审核啊，乌云是不是不重视xss了，可是这是通用性哟。而且也不是弹窗啊，getshell利用方法都给各位想好了…… 详细说明： 不知为何之前提交的一个投稿处的xss一直不审核。是不是要注册会员过于鸡肋，反正这网站各种xss，我干脆一起提交了吧。 1.文章评论处xss，需要改包，无需登录：alertdocument.cookie 2.留言板处xss，无需登录：alertdocument.cookie 3.用户管理处xss，需要改包：alertdocument.cookie 利用方法： 外连如下javascript： $document.readyfunction var cod...

PT-2013-6301 · Zenphoto · Zenphoto

Name of the Vulnerable Software and Affected Versions: Zenphoto versions prior to 1.4.5.4 Description: The issue is related to a cross-site scripting XSS vulnerability in the export function. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the URI...