Ultimate Directory Traversal Attack Cheat Sheet

Document Title: =============== Ultimate Directory Traversal Attack Cheat Sheet References: =========== Download: https://www.vulnerability-lab.com/resources/documents/587.txt Release Date: ============= 2012-05-28 Vulnerability Laboratory ID VL-ID: ==================================== 587...

EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

Crystal Office Suite v1.43 - Buffer Overflow Vulnerability

Document Title: =============== Crystal Office Suite v1.43 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=489 Release Date: ============= 2012-04-11 Vulnerability Laboratory ID VL-ID: ====================================...

Matterdaddy Market v1.1 - SQL Injection Vulnerabilities

Document Title: =============== Matterdaddy Market v1.1 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=499 Release Date: ============= 2012-04-08 Vulnerability Laboratory ID VL-ID: ==================================== 499...

B2Evolution CMS 4.1.3 - Multiple Web Vulnerabilities

Document Title: =============== B2Evolution CMS 4.1.3 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=482 Release Date: ============= 2012-03-28 Vulnerability Laboratory ID VL-ID: ==================================== 482 Produc...

JPM Article Script 6 - SQL Injection Vulnerability

Document Title: =============== JPM Article Script 6 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.comgetcontent.phpid=473 Release Date: ============= 2012-03-14 Vulnerability Laboratory ID VL-ID: ==================================== 473 Produc...

Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability

Document Title: =============== Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=466 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ====================================...

HITB2011KUL - Satellite Telephony Security - Jim Geovedi

Document Title: =============== HITB2011KUL - Satellite Telephony Security - Jim Geovedi References: =========== Download: http://www.vulnerability-lab.com/resources/videos/464.wmv View: http://www.youtube.com/watch?v=23FKGifzCJs Release Date: ============= 2012-03-07 Vulnerability Laboratory ID...

HITB2011KUL - Is The Pen Still Mightier Than The Sword

Document Title: =============== HITB2011KUL - Is The Pen Still Mightier Than The Sword References: =========== Download: http://www.vulnerability-lab.com/resources/videos/385.wmv View: http://www.youtube.com/watch?v=9dsYYZl4sk Release Date: ============= 2012-01-17 Vulnerability Laboratory ID...

Netlog Social - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Netlog Social - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=345 Release Date: ============= 2011-12-24 Vulnerability Laboratory ID VL-ID: ==================================...

FBC Market v1.1 - Cross Site Scripting Vulnerability

Document Title: =============== FBC Market v1.1 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=364 Release Date: ============= 2011-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 364...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities

Document Title: =============== ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=93 FULL: Discl. Date OSVDB ID CVE ID Creditees Title 2011-09-27 76035 Benjamin Kunz Mejri ServersCheck Monitoring...

Facebook BugBounty #2 - Persistent Web Vulnerability

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/277.wmv View: http://www.youtube.com/watch?v=RkWDcZNjZpg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=239 Release...

Subsembly Banking 3.1.x - Persistent Filter Vulnerability

Document Title: =============== Subsembly Banking 3.1.x - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=74 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 74...

ME Central Desktop v7.x - Multiple Persistent Vulnerabilities

Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...

NetGear C DSL Router R0318 - Multiple Web Vulnerabilities

Document Title: =============== NetGear C DSL Router R0318 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-18 Vulnerability Laboratory ID VL-ID: ==================================== 40 Product & Service Introduction: =============================== RO318 ergänzt Produktfamilie...

DB S Bahn Muenchen - SQL Injection Vulnerability

Document Title: =============== DB S Bahn Muenchen - SQL Injection Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 167 Product & Service Introduction: =============================== Official Website of Deutsche Bahn...

Asterisk2Billing v1.9.4 - SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - SQL Injection Vulnerability Release Date: ============= 2011-08-11 Vulnerability Laboratory ID VL-ID: ==================================== 246 Product & Service Introduction: =============================== Asterisk ist eine freie Software...

European Union - Newsletter CSS Vulnerability

Document Title: =============== European Union - Newsletter CSS Vulnerability References: =========== View: http://www.youtube.com/watch?v=4Zy0sNKqBUQ Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 238 Discovery Status:...

Hagebaumarkt CMS - Directory Traversal Vulnerability

Document Title: =============== Hagebaumarkt CMS - Directory Traversal Vulnerability Release Date: ============= 2011-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 159 Product & Service Introduction: =============================== Wir sind Ihr Partner in Sachen...

SolveDirect SDcall v5.6.x - Multiple Web Vulnerabilities

Document Title: =============== SolveDirect SDcall v5.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-24 Vulnerability Laboratory ID VL-ID: ==================================== 122 Product & Service Introduction: =============================== ITIL konformes best practice...

UltraFXP v1.07 - Stack Buffer Overflow Vulnerability

Document Title: =============== UltraFXP v1.07 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 162 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

Google Picasa v3.5 - Local Buffer Overflow Vulnerability

Document Title: =============== Google Picasa v3.5 - Local Buffer Overflow Vulnerability References Source: ==================== OSVDB-ID: 63817 http://osvdb.org/show/osvdb/63817 EDB-ID: 10489 http://www.exploit-db.com/exploits/10489/ Release Date: ============= 2011-06-17 Vulnerability Laborator...

Simple Member v1.2.x - Auth Bypass Vulnerability

Document Title: =============== Simple Member v1.2.x - Auth Bypass Vulnerability Release Date: ============= 2011-06-13 Vulnerability Laboratory ID VL-ID: ==================================== 126 Product & Service Introduction: =============================== Simple Member allows you to put up th...

A2 Player Pro v2.51 - Stack Overflow Vulnerability (m3u)

Document Title: =============== A2 Player Pro v2.51 - Stack Overflow Vulnerability m3u Release Date: ============= 2009-07-14 Vulnerability Laboratory ID VL-ID: ==================================== 2 Product & Service Introduction: =============================== Audio Player Abstract Advisory...

ProjectSend r754 - IDOR & Authentication Bypass

Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2031 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 2031 Comm...

404TinyShell connect over Protocol Instance

Document Title: =============== 404TinyShell connect over Protocol Instance References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1984 Video: https://www.youtube.com/watch?v=cQKGT1K8RZU Release Date: ============= 2016-10-14 Vulnerability Laboratory ID VL-ID:...

Kaspersky - Response Subject Persistent XSS Vulnerability

Document Title: =============== Kaspersky - Response Subject Persistent XSS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1977 Video: https://www.youtube.com/watch?v=TDsZUEDYvks Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1934 Release...

Kaspersky - File Manager Cross Site Scripting Vulnerability

Document Title: =============== Kaspersky - File Manager Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=vFQRHTBrx0 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1924 Release Dat...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-09-08 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Parse HTTP X-Forwarded Header Attack Redirect

Document Title: =============== Parse HTTP X-Forwarded Header Attack Redirect References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1944 PoC Video: https://www.youtube.com/watch?v=gpYe-hun8Xk Vulnerability Magazine:...

Edmodo BB#1 - Persistent Input Validation Vulnerability

Document Title: =============== Edmodo BB1 - Persistent Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1921 Release Date: ============= 2016-08-21 Vulnerability Laboratory ID VL-ID: ==================================== 192...

Stash v1.0.3 CMS - SQL Injection Vulnerability

Document Title: =============== Stash v1.0.3 CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1899 Release Date: ============= 2016-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 1899 Common...

Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability

Document Title: =============== Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1852 Release Date: ============= 2016-05-24 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability

Document Title: =============== Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1845 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ==================================...

Prezi Desktop Client - Persistent Cross Site Vulnerabilities

Document Title: =============== Prezi Desktop Client - Persistent Cross Site Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1834 View Video: https://www.youtube.com/watch?v=ugPQkXmcWYE Release Date: ============= 2016-04-24 Vulnerability Laboratory ID...

Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities

Document Title: =============== Direct Admin v1.50.0 - CS Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1824 Release Date: ============= 2016-04-14 Vulnerability Laboratory ID VL-ID:...

PHPNuke (Mod_weblink) - SQL Injection Vulnerability

Document Title: =============== PHPNuke Modweblink - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1775 Release Date: ============= 2016-03-02 Vulnerability Laboratory ID VL-ID: ==================================== 1775 Comm...

UBNT AirCRM - 3 x Persistent Cross Site Scripting

Document Title: =============== UBNT AirCRM - 3 x Persistent Cross Site Scripting References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1739 Video View: https://www.youtube.com/watch?v=5uiXWxJzNFk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1728 Release Date:...

Barracuda Networks MDM - Persistent Mail Vulnerability

Document Title: =============== Barracuda Networks MDM - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1315 Release Date: ============= 2016-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 131...

Compal ConnectBox - Passphrase Filter Bypass Vulnerability

Document Title: =============== Compal ConnectBox - Passphrase Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1726 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-02 Vulnerability...

Switch v4.68 - Code Execution Vulnerability

Document Title: =============== Switch v4.68 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1649 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1649 Common...

W150D Wireless N 150 ADSL2 Modem Router Vulnerability

Document Title: =============== W150D Wireless N 150 ADSL2 Modem Router Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1612 Release Date: ============= 2015-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 1612...

UDID v1.0 iOS - Persistent Mail Encode Vulnerability

Document Title: =============== UDID v1.0 iOS - Persistent Mail Encode Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1590 Release Date: ============= 2015-09-22 Vulnerability Laboratory ID VL-ID: ==================================== 1590...

Spotify - CSRF Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1594 Video: https://www.youtube.com/watch?v=1qjz0rC6Zy0 Release Date: ============= 2015-09-04 Vulnerability Laboratory ID VL-ID:...

Ferrari Online Service - (PHP) Remote Commend Injection

Document Title: =============== Ferrari Online Service - PHP Remote Commend Injection References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1561 View Video: https://www.youtube.com/watch?v=0m-gYRoBpoI Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID:...

Ebay Inc Magento #10 - Persistent Filename Vulnerability

Document Title: =============== Ebay Inc Magento 10 - Persistent Filename Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1458 Video: https://www.youtube.com/watch?v=WffsHd8pibE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1457 EIBBP-31603...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

Facebook #26 - Bypass & Exception Redirect Vulnerability

Document Title: =============== Facebook 26 - Bypass & Exception Redirect Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1484 Video View: https://www.youtube.com/watch?v=I65zFWF-pMg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1483 Release...