PayPal Inc BB #127 - 2FA Bypass Vulnerability

Document Title: =============== PayPal Inc BB 127 - 2FA Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1903 Release Date: ============= 2016-08-12 Vulnerability Laboratory ID VL-ID: ==================================== 1903 Common...

Microsoft Skype v8.34 Android - Authentication Bypass

Document Title: =============== Microsoft Skype v8.34 Android - Authentication Bypass References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2178 Video: https://www.youtube.com/watch?v=2AUxh2M1EPg Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2177 Release Date...

Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability

Document Title: =============== Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2102 Ticket:...

Trend Micro (Account) - Email Spoofing Web Vulnerability

Document Title: =============== Trend Micro Account - Email Spoofing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1693 Trend Micro ID: 1-1-1035655030 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID:...

CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1835 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5961 CVE-ID: ======= CVE-2018-5961 Release Date:...

Docebo LMS 6.9 - (Moxie) API Calls RST RCE PoC

Document Title: =============== Docebo LMS 6.9 - Moxie API Calls RST RCE PoC References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1892 PoC Video: https://www.youtube.com/watch?v=YF57jTPESgQ Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1888 Release Date:...

OSQA CMS v3b - Multiple Web Vulnerabilities

Document Title: =============== OSQA CMS v3b - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=461 Release Date: ============= 2012-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 461 Common...

CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5962 CVE-ID: ======= CVE-2018-5962 Release Date:...

CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate

Document Title: =============== CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2014 Video: https://www.youtube.com/watch?v=81Qam91pRoE Credits:...

iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll

Document Title: =============== iExplorer 3.6.3 - DLL Hijacking Exploit itunesmobiledevice.dll References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1415 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9600 CVE-ID: ======= CVE-2014-9600 Release Date:...

PHP Melody v3.0 - (Editor) Persistent XSS Vulnerability

Document Title: =============== PHP Melody v3.0 - Editor Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2291 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date: ===========...

Weblication CMS Core & Grid v12.6.24 - XSS Vulnerabilities

Document Title: =============== Weblication CMS Core & Grid v12.6.24 - XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2121 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-13002 CVE-ID: ======= CVE-2018-13002 Release Date:...

Hola VPN v1.34 - Privilege Escalation Vulnerability

Document Title: =============== Hola VPN v1.34 - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2062 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16757 CVE-ID: ======= CVE-2017-16757 Release Date:...

Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability

Document Title: =============== Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1372 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9334 CVE-ID: ======= CVE-2014-9334 Release Date:...

SonicWall SonicOS 7.5.0.12 & 6.x - Cross Site Vulnerability

Document Title: =============== SonicWall SonicOS 7.5.0.12 & 6.x - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1359 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3447 CVE-ID: ======= CVE-2015-3447 Release Date:...

QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability

Document Title: =============== QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1173 View: http://www.youtube.com/watch?v=6aQR8H6HoCs http://www.vulnerability-lab.com/getcontent.php?id=1171 Resources:...

SonicWall Backend Server - CS Cross Site Web Vulnerability

Document Title: =============== SonicWall Backend Server - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1100 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2589...

Draytek VigorAP - (RADIUS) Persistent XSS Vulnerability

Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 224...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Def Blog CMS v1.0.2 - Multiple Web Vulnerabilities

Document Title: =============== Def Blog CMS v1.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=576 Release Date: ============= 2012-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 576 Comm...

PHP Melody v3.0 - (vid) SQL Injection Vulnerability

Document Title: =============== PHP Melody v3.0 - vid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2295 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date: =============...

123ContactForm - Cross Site Scripting Web Vulnerability

Document Title: =============== 123ContactForm - Cross Site Scripting Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1982 Ref: 123-1476631846 Release Date: ============= 2017-06-12 Vulnerability Laboratory ID VL-ID:...

Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities

Document Title: =============== Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2076 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15949 CVE-ID: ======= CVE-2017-15949 Release Date:...

Adobe Premiere Clip v1.1.1 iOS - Persistent Vulnerability

Document Title: =============== Adobe Premiere Clip v1.1.1 iOS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1478 PSIRT ID: 3721 Video: http://www.vulnerability-lab.com/getcontent.php?id=1479 Bulletin:...

Jease CMS v2.11 - Persistent UI Web Vulnerability

Document Title: =============== Jease CMS v2.11 - Persistent UI Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1373 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8780 CVE-ID: ======= CVE-2014-8780 Release Date: =============...

Apache Sling Framework v2.3.6 - Information Disclosure

Document Title: =============== Apache Sling Framework v2.3.6 - Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1536 Adobe Bulletin: https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html Vulnerability Magazine...

ES File Explorer v3.2.4.1 - Path Traversal Vulnerability

Document Title: =============== ES File Explorer v3.2.4.1 - Path Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1435 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1876 CVE-ID: ======= CVE-2015-1876 Release Date:...

WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability

Document Title: =============== WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2158 Reference: https://wordpress.org/support/?posttype=topic&p=10874555...

Barracuda MAS - (ldap_load_entry.cgi) XSS Vulnerability

Document Title: =============== Barracuda MAS - ldaploadentry.cgi XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2168 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20369 CVE-ID: ======= CVE-2018-20369 Release Date:...

Salesforce Careermount - Bypass & XSS Web Vulnerability

Document Title: =============== Salesforce Careermount - Bypass & XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1969 Release Date: ============= 2018-07-04 Vulnerability Laboratory ID VL-ID: ====================================...

Facebook API v2.1 - RFC6749 Open Redirect Vulnerability

Document Title: =============== Facebook API v2.1 - RFC6749 Open Redirect Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1972 Vulnerability Magazine:...

Microsoft Office 365 Word - Code Execution Vulnerability

Document Title: =============== Microsoft Office 365 Word - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1030 Release Date: ============= 2016-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

Compal ConnectBox - Wireless Passphrase Filter Bypass

Document Title: =============== Compal ConnectBox - Wireless Passphrase Filter Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1705 Release Date: ============= 2016-02-03 Vulnerability Laboratory ID VL-ID: ==================================== 1705...

U.S. Geological Survey Website - SQL Injection Vulnerability

Document Title: =============== U.S. Geological Survey Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=278 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ===================================...

NetChat v7.8 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== NetChat v7.8 - Persistent Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2174 Watch Video: https://www.youtube.com/watch?v=2u-DHd5zlQw Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2171...

Photos in Wifi 1.0.1 iOS - Path Traversal Web Vulnerability

Document Title: =============== Photos in Wifi 1.0.1 iOS - Path Traversal Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5283 CVE-ID: ======= CVE-2018-5283 Release Date:...

Microsoft Yammer - oAuth Bypass Session Vulnerability

Document Title: =============== Microsoft Yammer - oAuth Bypass Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1003 Microsoft Security Response Center MSRC ID: 15126 Video: http://www.vulnerability-lab.com/getcontent.php?id=1043...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

Ultimate POS v4.4 - (Products) Persistent XSS Vulnerability

Document Title: =============== Ultimate POS v4.4 - Products Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2296 Release Date: ============= 2021-10-25 Vulnerability Laboratory ID VL-ID: ====================================...

e107 v2 Bootstrap CMS - CSRF Web Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2083 Release Date: ============= 2017-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 2083 Commo...

iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability

Document Title: =============== iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9336 CVE-ID: ======= CVE-2014-9336 Release Date:...

Interspire Email Marketer v6.0.1 - Multiple Vulnerabilities

Document Title: =============== Interspire Email Marketer v6.0.1 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=710 Release Date: ============= 2012-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

Skype v8.x - History Export v7 Web Vulnerability

Document Title: =============== Skype v8.x - History Export v7 Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2187 Vulnerability Magazine: https://www.vulnerability-db.com/?q=articles/2019/08/11/skype MSRC: VULN-007910 Release Date:...

Huawei Flybox B660 Router - Auth Bypass Vulnerability

Document Title: =============== Huawei Flybox B660 Router - Auth Bypass Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2010 Huawei ID: 558969357627813 Release Date: ============= 2016-11-18 Vulnerability Laboratory ID VL-ID:...

Oracle Corporation MyOracle - Persistent Vulnerability

Document Title: =============== Oracle Corporation MyOracle - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1261 Oracle Security ID Team Tracking ID: [email protected]...

Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability

Document Title: =============== Mozilla Bug Bounty 5 - WireTap Remote Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=953 Mozilla Bug Tracking ID: 875818 Video: http://www.vulnerability-lab.com/getcontent.php?id=1182 KBCERT: VU863369...

PayPal Inc - Security Key Pin Approval & Expire Bypass

Document Title: =============== PayPal Inc - Security Key Pin Approval & Expire Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1666 Release Date: ============= 2018-06-26 Vulnerability Laboratory ID VL-ID: ==================================== 166...

Telekom Magenta CMS - Multiple Cross Site Vulnerabilities

Document Title: =============== Telekom Magenta CMS - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2052 Telekom Security ID: 20161216SSc01 Release Date: ============= 2017-09-17 Vulnerability Laboratory ID VL-ID:...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

My Movie Collection Sinatra App - (Movie) XSS Vulnerability

Document Title: =============== My Movie Collection Sinatra App - Movie XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2294 Release Date: ============= 2021-11-01 Vulnerability Laboratory ID VL-ID: ====================================...