Getdpd BB #1 - Persistent Web Vulnerability

Document Title: =============== Getdpd BB 1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 ID: 14770 Release Date: ============= 2016-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 1564...

Spotify - CSRF & Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

Magento Bug Bounty - Cross Site Cross Site Vulnerability

Document Title: =============== Magento Bug Bounty - Cross Site Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1642 Video: https://www.youtube.com/watch?v=VDXeLSmgxIQ APPSEC-1126 Release Date: ============= 2015-11-11 Vulnerability Laboratory I...

UBNT Bug Bounty #1 - CS Cross Site Scripting Vulnerability

Document Title: =============== UBNT Bug Bounty 1 - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1465 52988 Release Date: ============= 2015-08-17 Vulnerability Laboratory ID VL-ID:...

Ferrari Online Service - (PHP) Remote Commend Injection

Document Title: =============== Ferrari Online Service - PHP Remote Commend Injection References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1561 View Video: https://www.youtube.com/watch?v=0m-gYRoBpoI Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID:...

Blueberry Express v5.9.x - Buffer Overflow Vulnerability

Document Title: =============== Blueberry Express v5.9.x - Buffer Overflow Vulnerability References: =========== Video: http://www.vulnerability-lab.com/getcontent.php?id=1537 View Video: https://www.youtube.com/watch?v=hkrk8HmhEU4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1535...

1 Click Extract Audio v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Extract Audio v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1507 View Video: https://www.youtube.com/watch?v=O2Qq-0lpU74 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1506 Release...

1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1504 Releas...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability

Document Title: =============== WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1498 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 149...

Photo Manager Pro v4.4.0 iOS - File Include Vulnerability

Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1445 Release Date: ============= 2015-03-12 Vulnerability Laboratory ID VL-ID: ====================================...

Facebook BBP - Session ID & CSRF Vulnerability

Document Title: =============== Facebook BBP - Session ID & CSRF Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1433 Video: https://www.youtube.com/watch?v=SAr2AGLrBkQ Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1432 Vulnerability Magazin...

Program-O v2.4.6 - Multiple Web Vulnerabilities

Document Title: =============== Program-O v2.4.6 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1414 Release Date: ============= 2015-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 1414 Commo...

Blitz CMS Community - SQL Injection Web Vulnerability

Document Title: =============== Blitz CMS Community - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1403 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 1402...

Morfy CMS v1.05 - Command Execution Vulnerability

Document Title: =============== Morfy CMS v1.05 - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1367 https://github.com/Awilum/monstra-cms/issues/351 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9185 CVE-ID:...

iFileExplorer v6.51 iOS - File Include Web Vulnerability

Document Title: =============== iFileExplorer v6.51 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1345 Release Date: ============= 2014-10-21 Vulnerability Laboratory ID VL-ID: ====================================...

FileBug v1.5.1 iOS - Directory Traversal Vulnerability

Document Title: =============== FileBug v1.5.1 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1342 Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID: ==================================== 134...

Parallels Plesk 11.5.x - URL Protection Filter Bypass

Document Title: =============== Parallels Plesk 11.5.x - URL Protection Filter Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1331 View: https://www.youtube.com/watch?v=mjkWIFNJ2Sw Release Date: ============= 2014-10-13 Vulnerability Laboratory ID VL-ID:...

SmarterTools Smarter Track 6-10 - Information Disclosure

Document Title: =============== SmarterTools Smarter Track 6-10 - Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1298 Tracking ID: 088-1B879F0C-0A22 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID:...

Avira Service - Unvalidated CSRF Token Account Hijacking

Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...

Avira Service - Unvalidated CSRF Token Account Hijacking

Document Title: =============== Avira Service - Unvalidated CSRF Token Account Hijacking References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1301 View: https://www.youtube.com/watch?v=lJR8Hv5JnOI Release Date: ============= 2014-08-28 Vulnerability Laboratory ID VL-ID:...

PayPal MOShipping API - Bypass & Multiple Vulnerabilities

Document Title: =============== PayPal MOShipping API - Bypass & Multiple Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1273 Video: https://www.youtube.com/watch?v=GRvUsKWkIs Advisory 1: http://www.vulnerability-lab.com/getcontent.php?id=1049 Advisory ...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability

Document Title: =============== AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1258 Release Date: ============= 2014-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

Woltlab Burning Board 3.9.1 - Persistent Encoding Issue

Document Title: =============== Woltlab Burning Board 3.9.1 - Persistent Encoding Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1257 Video: https://www.youtube.com/watch?v=jNwS7gV7cQE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1256 Release Date...

Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities

Document Title: =============== Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1235 Release Date: ============= 2014-03-28 Vulnerability Laboratory ID VL-ID: ====================================...

Easy FileManager 1.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== Easy FileManager 1.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1234 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 12...

Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability

Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

Mozilla Thunderbird - WireTap Remote 0Day Vulnerability

Document Title: =============== Mozilla Thunderbird - WireTap Remote 0Day Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1182 View: http://www.youtube.com/watch?v=mqZ4eY2th0s Advisory: http://www.vulnerability-lab.com/getcontent.php?id=967 Release Date:...

FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1170 Release Date: ============= 2013-12-15 Vulnerability Laboratory ID VL-ID: ====================================...

Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities

Document Title: =============== Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1152 Release Date: ============= 2013-12-03 Vulnerability Laboratory ID VL-ID: ==================================...

Apple iOS7 iPhone5 iPad2 - Pass Code Bypass Vulnerability

Document Title: =============== Apple iOS7 iPhone5 iPad2 - Pass Code Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1092 View: http://www.youtube.com/watch?v=71k7szhokg Release Date: ============= 2013-09-24 Vulnerability Laboratory ID VL-ID:...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=991 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 991...

Barracuda Backup - Cross Site Scripting Vulnerability

Document Title: =============== Barracuda Backup - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=799 BARRACUDA NETWORK SECURITY ID: BNSEC-1949 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID:...

Filter Evasion and Bypass Methods - Pentest Magazine

Document Title: =============== Filter Evasion and Bypass Methods - Pentest Magazine References: =========== Download: http://www.vulnerability-lab.com/resources/documents/798.pdf Magazine: http://pentestmag.com/pentest-regular-0113/ Release Date: ============= 2013-05-28 Vulnerability Laboratory...

Filter Evasion and Bypass Methods - Pentest Magazine

Document Title: =============== Filter Evasion and Bypass Methods - Pentest Magazine References: =========== Download: https://www.vulnerability-lab.com/resources/documents/798.pdf Magazine: https://pentestmag.com/pentest-regular-0113/ Release Date: ============= 2013-05-28 Vulnerability Laborato...

Sony PSN Community - Mail Encoding Web Vulnerability

Document Title: =============== Sony PSN Community - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=748 Release Date: ============= 2013-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 747...

Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability

Document Title: =============== Paypal Bug Bounty 31 - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=706 PayPal Security UID: erc849qoz Release Date: ============= 2013-04-03 Vulnerability Laboratory ID VL-ID:...

Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=882 Release Date: ============= 2013-02-23 Vulnerability Laboratory ID VL-ID: ====================================...

Apple iOS v6.1 (10B143) - Pass Code Bypass Vulnerability 2

Document Title: =============== Apple iOS v6.1 10B143 - Pass Code Bypass Vulnerability 2 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=875 Advisory http://www.vulnerability-lab.com/getcontent.php?id=874 Video Release Date: ============= 2013-02-21...

USB Disk & File Transfer v1.3.1 - File Include Vulnerability

Document Title: =============== USB Disk & File Transfer v1.3.1 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=881 Release Date: ============= 2013-02-19 Vulnerability Laboratory ID VL-ID: ===================================...

Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities

Document Title: =============== Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=824 ID: SWIFT-3119 URL: http://dev.kayako.com/browse/SWIFT-3119 Release Date: ============= 2013-01-21 Vulnerability...

Wordpress Valums Uploader - File Upload Vulnerability

Document Title: =============== Wordpress Valums Uploader - File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=817 Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 817...

ME Mobile Application Manager v10 - SQL Vulnerabilities

Document Title: =============== ME Mobile Application Manager v10 - SQL Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=628 Manage Engine Ticket ID: 46119 Release Date: ============= 2012-08-17 Vulnerability Laboratory ID VL-ID:...

Nike+ Panel & Mobile App - Multiple Web Vulnerabilities

Document Title: =============== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=663 Release Date: ============= 2012-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 663...

News Script PHP v1.2 - Multiple Web Vulnerabilities

Document Title: =============== News Script PHP v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=600 Release Date: ============= 2012-06-06 Vulnerability Laboratory ID VL-ID: ==================================== 600...