Hagebaumarkt CMS - Directory Traversal Vulnerability

Document Title: =============== Hagebaumarkt CMS - Directory Traversal Vulnerability Release Date: ============= 2011-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 159 Product & Service Introduction: =============================== Wir sind Ihr Partner in Sachen...

Wordpress Audio Player v2.0b6 - Web Vulnerability

Document Title: =============== Wordpress Audio Player v2.0b6 - Web Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 84 Product & Service Introduction: =============================== Wordpress Audio Player Plugin/Addon...

sNews v1.7.1 - File Upload Vulnerability

Document Title: =============== sNews v1.7.1 - File Upload Vulnerability Release Date: ============= 2011-07-11 Vulnerability Laboratory ID VL-ID: ==================================== 142 Product & Service Introduction: =============================== sNews is a completely free, standards...

Yahoo Mail - Cross Site Scripting & Webfilter Bypass

Document Title: =============== Yahoo Mail - Cross Site Scripting & Webfilter Bypass Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 130 Product & Service Introduction: =============================== Enjoy tons of features and fun wa...

Evo CMS 2.1.0 - Multiple Web Vulnerabilities

Document Title: =============== Evo CMS 2.1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 191 Product & Service Introduction: =============================== N/A Abstract Advisory Information:...

Simple Member v1.2.x - Auth Bypass Vulnerability

Document Title: =============== Simple Member v1.2.x - Auth Bypass Vulnerability Release Date: ============= 2011-06-13 Vulnerability Laboratory ID VL-ID: ==================================== 126 Product & Service Introduction: =============================== Simple Member allows you to put up th...

Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability

Document Title: =============== Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 153 Product & Service Introduction: =============================== Parallels Plesk Panel ist...

Microsoft Windows MSC XXE Data Exfiltration Vulnerability

Document Title: =============== Microsoft Windows MSC XXE Data Exfiltration Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2095 Video: https://www.youtube.com/watch?v=GmaNKZ0h3Yc Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2094 Release...

Kaspersky - Response Subject Persistent XSS Vulnerability

Document Title: =============== Kaspersky - Response Subject Persistent XSS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1977 Video: https://www.youtube.com/watch?v=TDsZUEDYvks Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1934 Release...

iPod Video Converter v1.34 - DLL Hijacking Exploit

Document Title: =============== iPod Video Converter v1.34 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1961 Release Date: ============= 2016-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 1961...

CareMonkey - Reset Password Token Remote Vulnerability

Document Title: =============== CareMonkey - Reset Password Token Remote Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1926 Video: https://www.youtube.com/watch?v=cnwmQAUI7ik Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1873 Release Date:...

Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1882 Release Date: ============= 2016-07-31 Vulnerability Laboratory ID VL-ID: ====================================...

VUPlayer 2.49 - (.wax) Buffer Overflow Vulnerability

Document Title: =============== VUPlayer 2.49 - .wax Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1877 Release Date: ============= 2016-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 1877...

Saveya Bounty #1 - Bypass & Persistent Vulnerability

Document Title: =============== Saveya Bounty 1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1857 SaveYa ID: 56 Acknowledgements: https://www.saveya.com/white-hat-program-acknowledgements Release Date: =============...

Prezi Desktop Client - Persistent Cross Site Vulnerabilities

Document Title: =============== Prezi Desktop Client - Persistent Cross Site Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1834 View Video: https://www.youtube.com/watch?v=ugPQkXmcWYE Release Date: ============= 2016-04-24 Vulnerability Laboratory ID...

PayPal Bug Bounty #121 - Bypass & Persistent Vulnerability

Document Title: =============== PayPal Bug Bounty 121 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1696 Video: https://www.youtube.com/watch?v=ilLmbVC7RVY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1627 Release...

Getdpd BB #1 - Persistent Web Vulnerability

Document Title: =============== Getdpd BB 1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 ID: 14770 Release Date: ============= 2016-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 1564...

Vbulletin 5.x - Remote Code Execution Exploit (PL)

Document Title: =============== Vbulletin 5.x - Remote Code Execution Exploit PL References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1651 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1651 Comm...

Switch v4.68 - Code Execution Vulnerability

Document Title: =============== Switch v4.68 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1649 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1649 Common...

Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability

Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...

Magento Bug Bounty - Cross Site Cross Site Vulnerability

Document Title: =============== Magento Bug Bounty - Cross Site Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1642 Video: https://www.youtube.com/watch?v=VDXeLSmgxIQ APPSEC-1126 Release Date: ============= 2015-11-11 Vulnerability Laboratory I...

PayPal Inc - Bypass & Session Fixation Vulnerability

Document Title: =============== PayPal Inc - Bypass & Session Fixation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1615 Video: https://www.youtube.com/watch?v=Uyg8xlt-8go Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1509 Release Date:...

IconLover v5.4.5 - Stack Buffer Overflow Vulnerability

Document Title: =============== IconLover v5.4.5 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1609 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 160...

Spotify - CSRF Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1594 Video: https://www.youtube.com/watch?v=1qjz0rC6Zy0 Release Date: ============= 2015-09-04 Vulnerability Laboratory ID VL-ID:...

UBNT Bug Bounty #1 - CS Cross Site Scripting Vulnerability

Document Title: =============== UBNT Bug Bounty 1 - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1465 52988 Release Date: ============= 2015-08-17 Vulnerability Laboratory ID VL-ID:...

Ferrari Online Service - (PHP) Remote Commend Injection

Document Title: =============== Ferrari Online Service - PHP Remote Commend Injection References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1561 View Video: https://www.youtube.com/watch?v=0m-gYRoBpoI Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID:...

Ferrari Online Service - (PHP) Remote Commend Injection

Document Title: =============== Ferrari Online Service - PHP Remote Commend Injection References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1561 View Video: https://www.youtube.com/watch?v=0m-gYRoBpoI Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID:...

Apple iTunes & AppStore - Persistent Invoice Vulnerability

Document Title: =============== Apple iTunes & AppStore - Persistent Invoice Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1512 Apple Security ID: 623920272 Video: http://www.vulnerability-lab.com/getcontent.php?id=1517 Vulnerability...

FoxyCart Bug Bounty #1 - Bypass & Persistent Vulnerability

Document Title: =============== FoxyCart Bug Bounty 1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1451 098bdc9b309783df65044c5abb690dafdd4bcd436c380ae68c924fe37e14b4e0 Release Date: ============= 2015-07-14...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

HUAWEI MobiConnect 23.9.17.216 - Privilege Escalation

Document Title: =============== HUAWEI MobiConnect 23.9.17.216 - Privilege Escalation References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1389 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 1389...

iPassword Manager v2.6 iOS - Persistent Vulnerabilities

Document Title: =============== iPassword Manager v2.6 iOS - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1453 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID: ==================================== 14...

T Mobile Internet Manager - DLL Hijacking (mfc71enudll)

Document Title: =============== T Mobile Internet Manager - DLL Hijacking mfc71enudll References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1434 Video: https://www.youtube.com/watch?v=C3PjVOxWvvw Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date:...

SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability

Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

Remote Web Desktop Full 5.9.5 - Multiple Vulnerabilities

Document Title: =============== Remote Web Desktop Full 5.9.5 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1409 Release Date: ============= 2015-01-19 Vulnerability Laboratory ID VL-ID: ====================================...

File Pro Mini v5.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== File Pro Mini v5.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1403 Release Date: ============= 2015-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 1403...

iBackup v10.0.0.45 - Privilege Escalation Vulnerability

Document Title: =============== iBackup v10.0.0.45 - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1382 Release Date: ============= 2014-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 13...

E-Journal CMS (ID) - Multiple Web Vulnerabilities

Document Title: =============== E-Journal CMS ID - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1380 Release Date: ============= 2014-12-17 Vulnerability Laboratory ID VL-ID: ==================================== 1380 Commo...

iWifi for Chat v1.1 iOS - Denial of Service Vulnerability

Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

iUSB v1.2 iOS - Arbitrary Code Execution Vulnerability

Document Title: =============== iUSB v1.2 iOS - Arbitrary Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1374 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID: ==================================== 137...

FileBug v1.5.1 iOS - Directory Traversal Vulnerability

Document Title: =============== FileBug v1.5.1 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1342 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ==================================== 134...

Microsoft Yammer - Bypass & Persistent Vulnerabilities

Document Title: =============== Microsoft Yammer - Bypass & Persistent Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1330 View: https://www.youtube.com/watch?v=0w8S3uryeII Advisory: http://www.vulnerability-lab.com/getcontent.php?id=976 Release Date:...

Avira Service - Unvalidated CSRF Token Account Hijacking

Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Vulnerable Workers in Uncertain Times - 4th Conference CFP

Document Title: =============== Vulnerable Workers in Uncertain Times - 4th Conference CFP References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1264 Download: http://www.vulnerability-lab.com/resources/documents/1264.pdf Release Date: ============= 2014-05-12 Vulnerability...

Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF

Document Title: =============== Heartbleed OpenSSL Lib Vulnerability - Demonstration MSF References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1262 Video: https://www.youtube.com/watch?v=ysc75yNrfyk Patch: http://www.vulnerability-lab.com/getcontent.php?id=1254 Check:...

NG WifiTransfer Pro 1.1 - File Include Vulnerability

Document Title: =============== NG WifiTransfer Pro 1.1 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1260 Release Date: ============= 2014-04-27 Vulnerability Laboratory ID VL-ID: ==================================== 1260...

Woltlab Burning Board 3.9.1 - Persistent Encoding Issue

Document Title: =============== Woltlab Burning Board 3.9.1 - Persistent Encoding Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1257 Video: https://www.youtube.com/watch?v=jNwS7gV7cQE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1256 Release Date...

AppFish Offline Coder v2.2 iOS - Persistent Vulnerability

Document Title: =============== AppFish Offline Coder v2.2 iOS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1252 Release Date: ============= 2014-04-07 Vulnerability Laboratory ID VL-ID: ====================================...