CVE-2012-6460

CVE-2012-6460 affects Opera browser versions before 11.67 and 12.x before 12.02, where a crafted web site can truncate a dialog and potentially trigger downloading and execution of arbitrary programs. Connected sources confirm this is a browser-level vulnerability with remote code execution impli...

MailOrderWorks v5.907 - Multiple Web Vulnerabilities

Document Title: =============== MailOrderWorks v5.907 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=798 Release Date: ============= 2013-01-02 Vulnerability Laboratory ID VL-ID: ==================================== 796...

Paypal Bug Bounty #34 - Redirect Web Vulnerability

Document Title: =============== Paypal Bug Bounty 34 - Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=718 Release Date: ============= 2012-12-12 Vulnerability Laboratory ID VL-ID: ==================================== 718 Commo...

Paypal Core Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Paypal Core Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=635 Release Date: ============= 2012-12-12 Vulnerability Laboratory ID VL-ID: ==================================== 635...

PayPal Persistent Listing Cross Site Scripting

Title: ====== Paypal BugBounty 2 - Persistent Listing Web Vulnerability Date: ===== 2012-11-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=634 VL-ID: ===== 634 Common Vulnerability Scoring System: ==================================== 4 Introduction: =============...

PayPal Plaza Cross Site Scripting

Title: ====== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability Date: ===== 2012-11-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=684 VL-ID: ===== 684 Common Vulnerability Scoring System: ==================================== 3 Introduction: =============...

Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability

Document Title: =============== Apple WGT Dictionnaire 1.3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=774 Release Date: ============= 2012-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 7...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Paypal Bug Bounty #11 - Redirection Web Vulnerability

Document Title: =============== Paypal Bug Bounty 11 - Redirection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=648 Release Date: ============= 2012-11-21 Vulnerability Laboratory ID VL-ID: ==================================== 648...

CVE-2012-1538

Microsoft Internet Explorer 9 is affected by CVE-2012-1538 (CFormElement use-after-free). The vulnerability allows remote code execution when a crafted web site triggers use-after-free of an object that has been freed, enabling code execution in the context of the user. The CVSS shows network att...

Eventy CMS 1.8 Plus Cross Site Scripting / SQL Injection

Title: ====== Eventy CMS v1.8 Plus - Multiple Web Vulnerablities Date: ===== 2012-11-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=756 VL-ID: ===== 756 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: ============= Publish...

CVE-2012-4540

Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service crash, or possibly execute arbitrary cod...

[WebSploit] Framework 2.0.3 with Wifi Jammer

WebSploit Is An Open Source Project For Scan And Analysis Remote System From Vulnerability. WebSploit Is An Open Source Project For : Social Engineering Works Scan,Crawler & Analysis Web Automatic Exploiter Support Network Attacks +Autopwn - Used From Metasploit For Scan and Exploit Target Servic...

CVE-2012-4989

OpenX 2.8.10 and earlier versions are vulnerable to a Cross‑Site Scripting (XSS) in admin/plugin-index.php via the parent parameter in the info action (CVE-2012-4989). The root cause is unsanitized input returned to the administrator’s browser. Vendor fixed it in SVN revision 81823 (solution file...

CVE-2012-0095

Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0086 and CVE-2012-0108...

Buffer overflow

Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web...