HackInTheBox Quartal Magazine - eZine Issue 09

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 09 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/HITB-Ezine-Issue-009.pdf Release Date: ============= 2012-11-30 Vulnerability...

iDev Rentals v1.0 - Multiple Web Vulnerabilities

Document Title: =============== iDev Rentals v1.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=760 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 758 Common...

Lepton v1.2.0 CMS - Multiple Web Vulnerabilities

Document Title: =============== Lepton v1.2.0 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=626 Release Date: ============= 2012-06-22 Vulnerability Laboratory ID VL-ID: ==================================== 626 Common...

News Script PHP v1.2 - Multiple Web Vulnerabilities

Document Title: =============== News Script PHP v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=600 Release Date: ============= 2012-06-06 Vulnerability Laboratory ID VL-ID: ==================================== 600...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Document Title: =============== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=567 Release Date: ============= 2012-05-11 Vulnerability Laboratory ID VL-ID: ==================================== 567 Commo...

NetBill Billing System v1.2 - Multiple Web Vulnerabilities

Document Title: =============== NetBill Billing System v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=560 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory v2.95 - Buffer Overflow Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=536 http://www.vulnerability-lab.com/getcontent.php?id=539 Release Date: ============= 2012-05-01 Vulnerability...

China Ministry of Commerce - SQL Injection Vulnerability

Document Title: =============== China Ministry of Commerce - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=321 Release Date: ============= 2012-04-30 Vulnerability Laboratory ID VL-ID: ==================================== 32...

VMware Service - Cross Site Scripting Vulnerability

Document Title: =============== VMware Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=420 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 420...

EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

Astaro Gateway v7.504 - Multiple Web Vulnerabilities

Document Title: =============== Astaro Gateway v7.504 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=8 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 8 Common...

B2Evolution CMS 4.1.3 - Multiple Web Vulnerabilities

Document Title: =============== B2Evolution CMS 4.1.3 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=482 Release Date: ============= 2012-03-28 Vulnerability Laboratory ID VL-ID: ==================================== 482 Produc...

JPM Article Script 6 - SQL Injection Vulnerability

Document Title: =============== JPM Article Script 6 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.comgetcontent.phpid=473 Release Date: ============= 2012-03-14 Vulnerability Laboratory ID VL-ID: ==================================== 473 Produc...

HITB2011KUL - Satellite Telephony Security - Jim Geovedi

Document Title: =============== HITB2011KUL - Satellite Telephony Security - Jim Geovedi References: =========== Download: http://www.vulnerability-lab.com/resources/videos/464.wmv View: http://www.youtube.com/watch?v=23FKGifzCJs Release Date: ============= 2012-03-07 Vulnerability Laboratory ID...

Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability

Document Title: =============== Pitrinec Macro Toolwork 7.5 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=466 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ====================================...

eFront Community++ v3.6.10 - SQL Injection Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=422 Release Date: ============= 2012-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 42...

Facebook Game Store - SQL Injection Vulnerability

Document Title: =============== Facebook Game Store - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=408 Release Date: ============= 2012-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 408 Produ...

Fortigate UTM WAF Appliance - Multiple Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=144 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012010446 ID: CNNVD-201201-446...

HITB2011KUL - Is The Pen Still Mightier Than The Sword

Document Title: =============== HITB2011KUL - Is The Pen Still Mightier Than The Sword References: =========== Download: http://www.vulnerability-lab.com/resources/videos/385.wmv View: http://www.youtube.com/watch?v=9dsYYZl4sk Release Date: ============= 2012-01-17 Vulnerability Laboratory ID...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Netlog Social - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Netlog Social - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=345 Release Date: ============= 2011-12-24 Vulnerability Laboratory ID VL-ID: ==================================...

FBC Market v1.1 - Cross Site Scripting Vulnerability

Document Title: =============== FBC Market v1.1 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=364 Release Date: ============= 2011-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 364...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

Subsembly Banking 3.1.x - Persistent Filter Vulnerability

Document Title: =============== Subsembly Banking 3.1.x - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=74 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 74...

ME Central Desktop v7.x - Multiple Persistent Vulnerabilities

Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...

NetGear C DSL Router R0318 - Multiple Web Vulnerabilities

Document Title: =============== NetGear C DSL Router R0318 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-18 Vulnerability Laboratory ID VL-ID: ==================================== 40 Product & Service Introduction: =============================== RO318 ergänzt Produktfamilie...

DB S Bahn Muenchen - SQL Injection Vulnerability

Document Title: =============== DB S Bahn Muenchen - SQL Injection Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 167 Product & Service Introduction: =============================== Official Website of Deutsche Bahn...

Hagebaumarkt CMS - Directory Traversal Vulnerability

Document Title: =============== Hagebaumarkt CMS - Directory Traversal Vulnerability Release Date: ============= 2011-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 159 Product & Service Introduction: =============================== Wir sind Ihr Partner in Sachen...

SolveDirect SDcall v5.6.x - Multiple Web Vulnerabilities

Document Title: =============== SolveDirect SDcall v5.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-24 Vulnerability Laboratory ID VL-ID: ==================================== 122 Product & Service Introduction: =============================== ITIL konformes best practice...

PHP Finance v1.0 - Multiple Web Vulnerabilities

Document Title: =============== PHP Finance v1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 103 Product & Service Introduction: =============================== PHPFinance is a web based financial...

Click&Email - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...

UltraFXP v1.07 - Stack Buffer Overflow Vulnerability

Document Title: =============== UltraFXP v1.07 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 162 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

Google Picasa v3.5 - Local Buffer Overflow Vulnerability

Document Title: =============== Google Picasa v3.5 - Local Buffer Overflow Vulnerability References Source: ==================== OSVDB-ID: 63817 http://osvdb.org/show/osvdb/63817 EDB-ID: 10489 http://www.exploit-db.com/exploits/10489/ Release Date: ============= 2011-06-17 Vulnerability Laborator...

Firefox 3.6.3 & Safari 4.0.5 - Denial of Service Vulnerability

Document Title: =============== Firefox 3.6.3 & Safari 4.0.5 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=186 Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID:...

ProjectSend r754 - IDOR & Authentication Bypass

Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2031 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 2031 Comm...

Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability

Document Title: =============== Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2027 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 2027...

Kaspersky - File Manager Cross Site Scripting Vulnerability

Document Title: =============== Kaspersky - File Manager Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id= Video: https://www.youtube.com/watch?v=vFQRHTBrx0 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1924 Release Dat...

Parse HTTP X-Forwarded Header Attack Redirect

Document Title: =============== Parse HTTP X-Forwarded Header Attack Redirect References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1944 PoC Video: https://www.youtube.com/watch?v=gpYe-hun8Xk Vulnerability Magazine:...

Edmodo BB#1 - Persistent Input Validation Vulnerability

Document Title: =============== Edmodo BB1 - Persistent Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1921 Release Date: ============= 2016-08-21 Vulnerability Laboratory ID VL-ID: ==================================== 192...

Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability

Document Title: =============== Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1845 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ==================================...

PayPal Bug Bounty #121 - Bypass & Persistent Vulnerability

Document Title: =============== PayPal Bug Bounty 121 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1696 Video: https://www.youtube.com/watch?v=ilLmbVC7RVY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1627 Release...

PHPNuke (Mod_weblink) - SQL Injection Vulnerability

Document Title: =============== PHPNuke Modweblink - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1775 Release Date: ============= 2016-03-02 Vulnerability Laboratory ID VL-ID: ==================================== 1775 Comm...

UBNT AirCRM - 3 x Persistent Cross Site Scripting

Document Title: =============== UBNT AirCRM - 3 x Persistent Cross Site Scripting References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1739 Video View: https://www.youtube.com/watch?v=5uiXWxJzNFk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1728 Release Date:...

UDID v1.0 iOS - Persistent Mail Encode Vulnerability

Document Title: =============== UDID v1.0 iOS - Persistent Mail Encode Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1590 Release Date: ============= 2015-09-22 Vulnerability Laboratory ID VL-ID: ==================================== 1590...

Ebay Inc Magento #10 - Persistent Filename Vulnerability

Document Title: =============== Ebay Inc Magento 10 - Persistent Filename Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1458 Video: https://www.youtube.com/watch?v=WffsHd8pibE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1457 EIBBP-31603...

Staff FTP v3.04 Software - DLL Hijacking Vulnerability

Document Title: =============== Staff FTP v3.04 Software - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1499 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 149...

T Mobile Internet Manager - DLL Hijacking (mfc71enudll)

Document Title: =============== T Mobile Internet Manager - DLL Hijacking mfc71enudll References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1434 Video: https://www.youtube.com/watch?v=C3PjVOxWvvw Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1427 Release Date:...

Barracuda Cloud Series - Filter Bypass Vulnerability

Document Title: =============== Barracuda Cloud Series - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=754 Barracuda Networks Security ID BNSEC: 731 Release Date: ============= 2015-01-19 Vulnerability Laboratory ID VL-ID:...

Barracuda Networks FW - Bypass & Exception Vulnerability

Document Title: =============== Barracuda Networks FW - Bypass & Exception Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1210 View Video: http://www.youtube.com/watch?v=-cTO7ork6Hg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1102 Release...