PayPal Bug Bounty #65 CN - Redirect Web Vulnerability

Document Title: =============== PayPal Bug Bounty 65 CN - Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=860 PayPal Security UID: rdbeeur Release Date: ============= 2013-11-16 Vulnerability Laboratory ID VL-ID:...

Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability

Document Title: =============== Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: http://www.vulnerability-lab.com/getcontent.php?id=1104 Release Date: ============= 2013-10-03...

WebAssist PowerCMS PHP - Multiple Web Vulnerabilities

Document Title: =============== WebAssist PowerCMS PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1098 Release Date: ============= 2013-09-27 Vulnerability Laboratory ID VL-ID: ==================================== 1098...

Security Guard CMS QT 4.7.3 - Stack Overflow Vulnerability

Document Title: =============== Security Guard CMS QT 4.7.3 - Stack Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1085 Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID: ====================================...

Photo Server 2.0 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Photo Server 2.0 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1029 Release Date: ============= 2013-07-22 Vulnerability Laboratory ID VL-ID: ====================================...

FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability

Document Title: =============== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1007 Release Date: ============= 2013-07-11 Vulnerability Laboratory ID VL-ID: ==================================== 1007...

Sony PSN Account Service - Password Reset Vulnerability

Document Title: =============== Sony PSN Account Service - Password Reset Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=740 Release Date: ============= 2013-05-11 Vulnerability Laboratory ID VL-ID: ==================================== 740...

Photo Transfer v4.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== Photo Transfer v4.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=933 Release Date: ============= 2013-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 933...

Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability

Document Title: =============== Paypal Bug Bounty 31 - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=706 PayPal Security UID: erc849qoz Release Date: ============= 2013-04-03 Vulnerability Laboratory ID VL-ID:...

Yahoo! TW YSM MKT - Blind SQL Injection Vulnerability

Document Title: =============== Yahoo! TW YSM MKT - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=892 Release Date: ============= 2013-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 892...

Wireless Disk PRO v2.3 iPad iPhone - Multiple Vulnerabilities

Document Title: =============== Wireless Disk PRO v2.3 iPad iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=883 Release Date: ============= 2013-02-25 Vulnerability Laboratory ID VL-ID: ==================================...

Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=882 Release Date: ============= 2013-02-23 Vulnerability Laboratory ID VL-ID: ====================================...

USB Disk & File Transfer v1.3.1 - File Include Vulnerability

Document Title: =============== USB Disk & File Transfer v1.3.1 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=881 Release Date: ============= 2013-02-19 Vulnerability Laboratory ID VL-ID: ===================================...

Juniper SA 2500 VPN SSL - Client Side XSS Vulnerability

Document Title: =============== Juniper SA 2500 VPN SSL - Client Side XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=723 Release Date: ============= 2013-01-22 Vulnerability Laboratory ID VL-ID: ==================================== 723...

Security in a serious way [THN] - eZine Issue 014

Document Title: =============== Security in a serious way THN - eZine Issue 014 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/THN-September2012.pdf Release Date: ============= 2012-11-26 Vulnerability...

iDev Rentals v1.0 - Multiple Web Vulnerabilities

Document Title: =============== iDev Rentals v1.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=760 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 758 Common...

VamCart v0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...

Croogo v1.3.4 CMS - Multiple Web Vulnerabilities

Document Title: =============== Croogo v1.3.4 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=533 Release Date: ============= 2012-04-28 Vulnerability Laboratory ID VL-ID: ==================================== 533 Produc...

ACC PHP eMail v1.1 - Multiple Web Vulnerabilities

Document Title: =============== ACC PHP eMail v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=505 Release Date: ============= 2012-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 505 Produ...

Apple Website Service - SQL Injection Vulnerabilities

Document Title: =============== Apple Website Service - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=476 APPLE ID: 196579501 CREDITS: http://support.apple.com/kb/ht1318 Release Date: ============= 2012-03-28 Vulnerability...

Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=428 Release Date: ============= 2012-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 42...

Notebooksbilliger Website - Persistent Web Vulnerability

Document Title: =============== Notebooksbilliger Website - Persistent Web Vulnerability Release Date: ============= 2011-09-07 Vulnerability Laboratory ID VL-ID: ==================================== 265 Product & Service Introduction: =============================== Die Firma wurde im Jahr 1989...

Asterisk2Billing v1.9.4 - SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - SQL Injection Vulnerability Release Date: ============= 2011-08-11 Vulnerability Laboratory ID VL-ID: ==================================== 246 Product & Service Introduction: =============================== Asterisk ist eine freie Software...

CodeLock Encrypter v2.7 - Multiple Web Vulnerabilities

Document Title: =============== CodeLock Encrypter v2.7 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-04 Vulnerability Laboratory ID VL-ID: ==================================== 102 Product & Service Introduction: =============================== The PHP/HTML Encryptor & The...

European Union - Newsletter CSS Vulnerability

Document Title: =============== European Union - Newsletter CSS Vulnerability References: =========== View: http://www.youtube.com/watch?v=4Zy0sNKqBUQ Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 238 Discovery Status:...

ICQ 7.5 Software - Remote Denial of Service Vulnerability

Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...

DIC INT Banking CMS v4.13.1 - Auth Bypass Vulnerability

Document Title: =============== DIC INT Banking CMS v4.13.1 - Auth Bypass Vulnerability Release Date: ============= 2011-07-23 Vulnerability Laboratory ID VL-ID: ==================================== 224 Product & Service Introduction: =============================== Digital Insight Corporation...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

Gallery v1.4.1 - Cross Site Scripting Vulnerability

Document Title: =============== Gallery v1.4.1 - Cross Site Scripting Vulnerability Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 213 Product & Service Introduction: =============================== Gallery 3 is the newest addition t...

Web Browser - Denial of Service Vulnerability

Document Title: =============== Web Browser - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/26.wmv View: http://www.youtube.com/watch?v=tdHvBYT4w5U Release Date: ============= 2011-06-15 Vulnerability Laboratory ID VL-ID:...

flatfiler ONE rc2 - Multiple Web Vulnerabilities

Document Title: =============== flatfiler ONE rc2 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-13 Vulnerability Laboratory ID VL-ID: ==================================== 56 Abstract Advisory Information: ============================== An anonymous researcher discovered...

Simple Member v1.2.x - Auth Bypass Vulnerability

Document Title: =============== Simple Member v1.2.x - Auth Bypass Vulnerability Release Date: ============= 2011-06-13 Vulnerability Laboratory ID VL-ID: ==================================== 126 Product & Service Introduction: =============================== Simple Member allows you to put up th...

Reason Core Security v1.2.0.1 - Path Privilege Escalation

Document Title: =============== Reason Core Security v1.2.0.1 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2003 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ====================================...

404TinyShell connect over Protocol Instance

Document Title: =============== 404TinyShell connect over Protocol Instance References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1984 Video: https://www.youtube.com/watch?v=cQKGT1K8RZU Release Date: ============= 2016-10-15 Vulnerability Laboratory ID VL-ID:...

Kaspersky - Response Subject Persistent XSS Vulnerability

Document Title: =============== Kaspersky - Response Subject Persistent XSS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1977 Video: https://www.youtube.com/watch?v=TDsZUEDYvks Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1934 Release...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-09-08 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Typesettercms v5.0.1 - (Delete Files) CSRF Vulnerability

Document Title: =============== Typesettercms v5.0.1 - Delete Files CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1889 Release Date: ============= 2016-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 188...

Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-07-31 Vulnerability Laboratory ID VL-ID: ====================================...

Saveya Bounty #1 - Bypass & Persistent Vulnerability

Document Title: =============== Saveya Bounty 1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1857 SaveYa ID: 56 Acknowledgements: https://www.saveya.com/white-hat-program-acknowledgements Release Date: =============...

Mutualaid CMS v4.3.1 - SQL Injection Web Vulnerability

Document Title: =============== Mutualaid CMS v4.3.1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1858 Release Date: ============= 2016-06-20 Vulnerability Laboratory ID VL-ID: ==================================== 185...

Ahrare Andeysheh CMS - Multiple Web Vulnerabilities

Document Title: =============== Ahrare Andeysheh CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1827 Release Date: ============= 2016-04-18 Vulnerability Laboratory ID VL-ID: ==================================== 1827...

ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability

Document Title: =============== ifixit Bug Bounty 5 - Guide Search Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1699 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1698 View Video: https://www.youtube.com/watch?v=KFYECjwuFIE...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...

Vbulletin 5.x - Remote Code Execution Exploit (PL)

Document Title: =============== Vbulletin 5.x - Remote Code Execution Exploit PL References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1651 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1651 Comm...

Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability

Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...

Magento Bug Bounty - Cross Site Cross Site Vulnerability

Document Title: =============== Magento Bug Bounty - Cross Site Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1642 Video: https://www.youtube.com/watch?v=VDXeLSmgxIQ APPSEC-1126 Release Date: ============= 2015-11-11 Vulnerability Laboratory I...

IconLover v5.4.5 - Stack Buffer Overflow Vulnerability

Document Title: =============== IconLover v5.4.5 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1609 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 160...

Spotify - CSRF Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1594 Video: https://www.youtube.com/watch?v=1qjz0rC6Zy0 Release Date: ============= 2015-09-04 Vulnerability Laboratory ID VL-ID:...

UBNT Bug Bounty #1 - CS Cross Site Scripting Vulnerability

Document Title: =============== UBNT Bug Bounty 1 - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1465 52988 Release Date: ============= 2015-08-17 Vulnerability Laboratory ID VL-ID:...

Blueberry Express v5.9.x - Buffer Overflow Vulnerability

Document Title: =============== Blueberry Express v5.9.x - Buffer Overflow Vulnerability References: =========== Video: http://www.vulnerability-lab.com/getcontent.php?id=1537 View Video: https://www.youtube.com/watch?v=hkrk8HmhEU4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1535...