HITB Quartal Magazine - eZine Issue 08

Document Title: =============== HITB Quartal Magazine - eZine Issue 08 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/514.pdf Original: http://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-008.pdf Release Date: ============= 2012-04-14 Vulnerability...

CsForum v0.8 - Cross Site Scripting Vulnerability

Document Title: =============== CsForum v0.8 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=496 Release Date: ============= 2012-04-04 Vulnerability Laboratory ID VL-ID: ==================================== 496 Produ...

eFront Enterprise v3.6.10 - File Include Vulnerability

Document Title: =============== eFront Enterprise v3.6.10 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=296 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ==================================== 296...

Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability

Document Title: =============== Gwibber v2.29.1 & v3.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=365 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Facebook PromocionMomentosMágicos - SQL Vulnerability

Document Title: =============== Facebook PromocionMomentosMágicos - SQL Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=303 Release Date: ============= 2011-11-22 Vulnerability Laboratory ID VL-ID: ==================================== 303...

Skype Vendor Website - Cross Site Scripting Vulnerability

Document Title: =============== Skype Vendor Website - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=309 Release Date: ============= 2011-11-12 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Opera Browser v11.52 - Stack Buffer Overflow Vulnerability

Document Title: =============== Opera Browser v11.52 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=299 CNNVD-201110-708 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100708 Release Date: =============...

HITB Quartal Magazine - eZine Issue 007

Document Title: =============== HITB Quartal Magazine - eZine Issue 007 References: =========== Original: http://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-007.pdf Article: http://magazine.hitb.org/ Mirror: http://www.vulnerability-lab.com/resources/documents/297.pdf Article:...

Barracuda Backup v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201109-650 Release Date: ============= 2011-10-03 Vulnerability Laboratory ID VL-ID:...

Facebook SmarterMind - SQL Injection Vulnerability [HD]

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/249.wmv View: http://www.youtube.com/watch?v=4k7jbDOnB4 Release Date: ============= 2011-08-17 Vulnerability Laboratory ID VL-I...

Draytek Website - Remote SQL Injection Vulnerability

Document Title: =============== Draytek Website - Remote SQL Injection Vulnerability Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 124 Product & Service Introduction: =============================== DrayTek , established in 1997 by ...

Wordpress Theme Dosimple v2.0 - XSS Web Vulnerability

Document Title: =============== Wordpress Theme Dosimple v2.0 - XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2251 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 225...

KeeWeb v1.14.0 - (Notes) Html Inject Web Vulnerability

Document Title: =============== KeeWeb v1.14.0 - Notes Html Inject Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2237 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 2237...

File Explorer v1.4 iOS - Information Disclosure Vulnerability

Document Title: =============== File Explorer v1.4 iOS - Information Disclosure Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2220 Release Date: ============= 2020-04-27 Vulnerability Laboratory ID VL-ID:...

User Agent String Switcher Service - XSS Vulnerabilities

Document Title: =============== User Agent String Switcher Service - XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2189 Release Date: ============= 2019-08-13 Vulnerability Laboratory ID VL-ID: ====================================...

Apple iOS v12.1.1 - Combo Passcode Bypass Vulnerability

Document Title: =============== Apple iOS v12.1.1 - Combo Passcode Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2169 Watch Video: https://www.youtube.com/watch?v=QjhV59-NA60 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2162...

BMW ConnectedDrive - (Update) VIN Session Vulnerability

Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1913 Video: https://www.youtube.com/watch?v=udJoa3JEGM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1736 Vulnerability...

HackRF Circuit Board - New Universal Case for PenTests

Document Title: =============== HackRF Circuit Board - New Universal Case for PenTests References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2134 Download: https://www.vulnerability-lab.com/resources/documents/2134.rar Vulnerability Magazine:...

Magento - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Magento - Filter Bypass & Persistent Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1916 Videos: 4 x Proof of Concept https://www.youtube.com/watch?v=WIDwbSTCLQ https://www.youtube.com/watch?v=zaPRfvNQJzk...

Adobe CreativeCloud - (Events ) Persistent Vulnerability

Document Title: =============== Adobe CreativeCloud - Events Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1840 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 1840...

Microsoft MSDN - Cross Site Request Forgery Vulnerability

Document Title: =============== Microsoft MSDN - Cross Site Request Forgery Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2125 View Video: https://www.youtube.com/watch?v=xgKYZ4u-6lc Release Date: ============= 2018-06-11 Vulnerability Laboratory ID...

Banknotes Misproduction security & biometric weakness

Document Title: =============== Banknotes Misproduction security & biometric weakness References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2106 Video: https://www.youtube.com/watch?v=ORbU8fyhkgY Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2105 Vulnerabilit...

DVD Creator 4.1.0 - Insecure File Permissions Vulnerability

Document Title: =============== DVD Creator 4.1.0 - Insecure File Permissions Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2104 Release Date: ============= 2017-11-28 Vulnerability Laboratory ID VL-ID: ==================================...

Play TV v1.25.1(Build r123776) - DLL Hijack Vulnerability

Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-03 Vulnerability Laboratory ID VL-ID: ====================================...

Composr CMS v10.0.0 - Cross Site Scripting Vulnerability

Document Title: =============== Composr CMS v10.0.0 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2066 Release Date: ============= 2017-06-07 Vulnerability Laboratory ID VL-ID: ====================================...

Apple iOS 10.3 - MobileData Access Permission Vulnerability

Document Title: =============== Apple iOS 10.3 - MobileData Access Permission Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2077 Video: https://www.youtube.com/watch?v=XAv5v01PN6Q News Article:...

Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities

Document Title: =============== Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2049 View Video: https://www.youtube.com/watch?v=qLC8f7liPk8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2045...

Lock Photos Album&Videos Safe v4.3 - Directory Traversal

Document Title: =============== Lock Photos Album&Videos Safe v4.3 - Directory Traversal References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2032 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ====================================...

FCA US LLC UconnectPhone - XFS Attack & XSS Vulnerability

Document Title: =============== FCA US LLC UconnectPhone - XFS Attack & XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2020 Release Date: ============= 2016-12-15 Vulnerability Laboratory ID VL-ID: ====================================...

Trend Micro DirectPass - Bypass & Persistent Vulnerability

Document Title: =============== Trend Micro DirectPass - Bypass & Persistent Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1986 Video: https://www.youtube.com/watch?v=NImym71f3Bc Release Date: ============= 2016-10-17 Vulnerability Laboratory ID VL-ID:...

Contenido v4.9.11 - (Backend) Multiple XSS Vulnerabilities

Document Title: =============== Contenido v4.9.11 - Backend Multiple XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1928 Release Date: ============= 2016-10-10 Vulnerability Laboratory ID VL-ID: ====================================...

Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability

Document Title: =============== Flash Operator Panel 2.31.03 - CSV Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1908 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...

Nuke Evolution 2.0.9d - Multiple CS Cross Site Vulnerabilities

Document Title: =============== Nuke Evolution 2.0.9d - Multiple CS Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1894 Release Date: ============= 2016-08-08 Vulnerability Laboratory ID VL-ID:...

Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability

Document Title: =============== Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1886 Release Date: ============= 2016-07-27 Vulnerability Laboratory ID VL-ID: ====================================...

VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability

Document Title: =============== VUPlayer 2.49 - .pls Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1876 Release Date: ============= 2016-07-25 Vulnerability Laboratory ID VL-ID: ==================================== 1876...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-13...

AVAST (Shop) #18 - Multiple Client Side XSS Vulnerabilities

Document Title: =============== AVAST Shop 18 - Multiple Client Side XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1635 Release Date: ============= 2016-05-24 Vulnerability Laboratory ID VL-ID: ====================================...

AVAST Business #14 - Client Side Cross Site Vulnerability

Document Title: =============== AVAST Business 14 - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1624 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ====================================...

Teampass v2.1.25 - Unauthenticated Access Vulnerability

Document Title: =============== Teampass v2.1.25 - Unauthenticated Access Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1844 Release Date: ============= 2016-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Wordpress Truemag Theme - CS Cross Site Web Vulnerability

Document Title: =============== Wordpress Truemag Theme - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1839 Release Date: ============= 2016-04-28 Vulnerability Laboratory ID VL-ID: ====================================...

AVAST #13 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== AVAST 13 - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1623 Video: https://www.youtube.com/watch?v=08Ux7DUIfNo Release Date: ============= 2016-04-18 Vulnerability Laborato...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 182...

AccelSite Content Manager v1.0 - SQL Injection Vulnerability

Document Title: =============== AccelSite Content Manager v1.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1817 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID: ==================================...

Dorsa Web CMS - Multiple SQL Injection Vulnerabilities

Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-30 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Cades (2016Q1) - (id) Multiple SQL Injection Vulnerabilities

Document Title: =============== Cades 2016Q1 - id Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1804 Release Date: ============= 2016-03-29 Vulnerability Laboratory ID VL-ID: ====================================...

Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple CS CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1802 Release Date: ============= 2016-03-27 Vulnerability Laboratory ID VL-ID: ====================================...

ChitaSoft (Web-Application) - SQL Injection Vulnerability

Document Title: =============== ChitaSoft Web-Application - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1782 Release Date: ============= 2016-03-13 Vulnerability Laboratory ID VL-ID: ==================================== 17...

eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability

Document Title: =============== eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ===================================...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1710 Apple Follow-up ID: 631627909 Video: http://www.vulnerability-lab.com/getcontent.php?id=1711 Vulnerability...

Kleefa v1.7 (IR) - Multiple Web Vulnerabilities

Document Title: =============== Kleefa v1.7 IR - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1677 Release Date: ============= 2016-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 1677 Common...