HackInTheBox Quartal Magazine - eZine Issue 10

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 10 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/hitbez10.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-010.pdf Release Date: ============= 2014-01-31...

Facebook Bug Bounty - Redirect Web Vulnerabilities

Document Title: =============== Facebook Bug Bounty - Redirect Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1180 View Video1: http://www.youtube.com/watch?v=xBQYb5MUkk View Video2: http://www.youtube.com/watch?v=3P10Kd8m9bY View Video3:...

Microsoft Yammer - Persistent Profile Vulnerabilities

Document Title: =============== Microsoft Yammer - Persistent Profile Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=978 MSRC ID: 14808 Release Date: ============= 2013-12-11 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #42 - Persistent POST Inject Vulnerability

Document Title: =============== PayPal Inc BB 42 - Persistent POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=801 PayPal Security UID: kxy1ea5ech Release Date: ============= 2013-11-17 Vulnerability Laboratory ID VL-ID:...

Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass

Document Title: =============== Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1104 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: https://www.youtube.com/watch?v=6e-hvglQdg Release Date:...

Apple iOS v7.0 iPad with Face Time - Privacy Image Issue

Document Title: =============== Apple iOS v7.0 iPad with Face Time - Privacy Image Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1091 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1087 Video: http://www.youtube.com/watch?v=7acWAEZpbgs Release Date...

Facebook - Private Message (Attachment ID) Vulnerability

Document Title: =============== Facebook - Private Message Attachment ID Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1087 View: http://www.youtube.com/watch?v=azzZ7KDMMKw Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID:...

elproLOG WebAccess 2.1 - Multiple Vulnerabilities

Document Title: =============== elproLOG WebAccess 2.1 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1086 Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID: ==================================== 1086...

Monstra CMS v1.2.0 - Blind SQL Injection Vulnerability

Document Title: =============== Monstra CMS v1.2.0 - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1081 Release Date: ============= 2013-09-19 Vulnerability Laboratory ID VL-ID: ==================================== 108...

Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities

Document Title: =============== Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1062 Release Date: ============= 2013-08-29 Vulnerability Laboratory ID VL-ID:...

Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1047 Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Yammer SN - oAuth Bypass Token Vulnerability

Document Title: =============== Microsoft Yammer SN - oAuth Bypass Token Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1043 View: http://www.youtube.com/watch?v=SwxWNvmOsU4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1003 Microsoft...

WebDisk 3.0.2 PV iOS - Command Execution Vulnerability

Document Title: =============== WebDisk 3.0.2 PV iOS - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1035 Release Date: ============= 2013-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 103...

Private Photos v1.0 iOS - Persistent Path Web Vulnerability

Document Title: =============== Private Photos v1.0 iOS - Persistent Path Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1034 Release Date: ============= 2013-07-24 Vulnerability Laboratory ID VL-ID: ===================================...

iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability

Document Title: =============== iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1031 Release Date: ============= 2013-07-23 Vulnerability Laboratory ID VL-ID: ===================================...

Photo Server 2.0 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Photo Server 2.0 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1029 Release Date: ============= 2013-07-22 Vulnerability Laboratory ID VL-ID: ====================================...

Avira Analysis Web Service - SQL Injection Vulnerability

Document Title: =============== Avira Analysis Web Service - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=997 Public Video: http://www.youtube.com/watch?v=128cIzgt2EI Release Date: ============= 2013-07-07 Vulnerability...

MSN Hotmail - Password Reset (Session) Web Vulnerability

Document Title: =============== MSN Hotmail - Password Reset Session Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=994 Video: https://www.youtube.com/watch?v=INq6CirLgt0 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID:...

iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=991 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 991...

File via Wifi v1.3.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== File via Wifi v1.3.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=990 Release Date: ============= 2013-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 990...

Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=777 BARRACUDA NETWORK SECURITY ID: BNSEC-834 Release Date: ============= 2013-06-20 Vulnerability Laboratory ID VL-ID:...

Barracuda Backup - Cross Site Scripting Vulnerability

Document Title: =============== Barracuda Backup - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=799 BARRACUDA NETWORK SECURITY ID: BNSEC-1949 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID:...

Free Monthly Websites v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=851 Release Date: ============= 2013-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 8...

PayPal Inc Exploitation Session - Bug Bounty Video 2012

Document Title: =============== PayPal Inc Exploitation Session - Bug Bounty Video 2012 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=773 View: http://www.youtube.com/watch?v=MM2JH9rQ7Io Advisories: http://www.vulnerability-lab.com/getcontent.php?id=634...

Paypal Bug Bounty #8 - CSRF DEV Web Vulnerability

Document Title: =============== Paypal Bug Bounty 8 - CSRF DEV Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=644 Paypal UID: ydw159yyb Release Date: ============= 2013-01-23 Vulnerability Laboratory ID VL-ID:...

FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability

Document Title: =============== FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=558 http://www.fortiguard.com/advisory/FG-IR-012-007.html CVE: 2012-6347 Release Date: ============= 2012-11-30...

Skype Account Service - Reset (Session) Vulnerability

Document Title: =============== Skype Account Service - Reset Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=720 MSRC ID: 13050bc News:...

Akeni LAN v1.2.118 - Filter Bypass Vulnerability

Document Title: =============== Akeni LAN v1.2.118 - Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=761 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 761 Common...

AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=741 Release Date: ============= 2012-11-04 Vulnerability Laboratory ID VL-ID: ==================================== 741...

Parallels Plesk v11.0.9b - Multiple Web Vulnerabilities

Document Title: =============== Parallels Plesk v11.0.9b - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=714 Reward: 3000$ Release Date: ============= 2012-11-01 Vulnerability Laboratory ID VL-ID:...

NetCat CMS v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== NetCat CMS v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=738 Release Date: ============= 2012-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 738 Common...

CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies

Document Title: =============== CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=726 Release Date: ============= 2012-10-18 Vulnerability Laboratory ID VL-ID: ==================================== 726 Common...

vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities

Document Title: =============== vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=721 Release Date: ============= 2012-10-08 Vulnerability Laboratory ID VL-ID: ==================================== 7...

Rogers CA Website - SQL Injection Vulnerability

Document Title: =============== Rogers CA Website - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=725 Release Date: ============= 2012-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 725 Common...

Parallels Plesk v11.0.9 - Multiple Web Vulnerabilities

Document Title: =============== Parallels Plesk v11.0.9 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=699 Release Date: ============= 2012-08-31 Vulnerability Laboratory ID VL-ID: ==================================== 699...

SonicWall UTM ES WAF - Input Filter Bypass Vulnerability

Document Title: =============== SonicWall UTM ES WAF - Input Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=683 Download: http://www.vulnerability-lab.com/resources/videos/683.wmv View: http://www.youtube.com/watch?v=VQGlReh4VB0 Advisory1:...

AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities

Document Title: =============== AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=690 Release Date: ============= 2012-08-20 Vulnerability Laboratory ID VL-ID: ====================================...

ES Job Search Engine v3.0 - SQL injection vulnerability

Document Title: =============== ES Job Search Engine v3.0 - SQL injection vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=675 Release Date: ============= 2012-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 675...

Kaspersky Password Manager - Filter Bypass Vulnerability

Document Title: =============== Kaspersky Password Manager - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=674 Download: http://www.vulnerability-lab.com/resources/videos/674.wmv View: http://www.youtube.com/watch?v=8D86ic9opYE Advisory:...

Barracuda SSL VPN - Input Filter Bypass Vulnerability

Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...

Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities

Document Title: =============== Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=656 Release Date: ============= 2012-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 656...

Lepton v1.2.0 CMS - Multiple Web Vulnerabilities

Document Title: =============== Lepton v1.2.0 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=626 Release Date: ============= 2012-06-22 Vulnerability Laboratory ID VL-ID: ==================================== 626 Common...

Microsoft Fitbie Service - Multiple Cross Site Vulnerabilities

Document Title: =============== Microsoft Fitbie Service - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=573 Release Date: ============= 2012-06-17 Vulnerability Laboratory ID VL-ID:...

Nuked Klan SP CMS v4.5 - SQL injection Vulnerability

Document Title: =============== Nuked Klan SP CMS v4.5 - SQL injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=610 Release Date: ============= 2012-06-08 Vulnerability Laboratory ID VL-ID: ==================================== 610...

News Script PHP v1.2 - Multiple Web Vulnerabilities

Document Title: =============== News Script PHP v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=600 Release Date: ============= 2012-06-06 Vulnerability Laboratory ID VL-ID: ==================================== 600...

Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilities

Document Title: =============== Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=595 Release Date: ============= 2012-06-05 Vulnerability Laboratory ID VL-ID: ====================================...

Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities

Document Title: =============== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=515 Release Date: ============= 2012-05-13 Vulnerability Laboratory ID VL-ID: ====================================...

Serendipity v1.6 CMS - Multiple Web Vulnerabilities

Document Title: =============== Serendipity v1.6 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=535 Release Date: ============= 2012-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 535...

LAN Messenger v1.2.28 - Denial of Service Vulnerability

Document Title: =============== LAN Messenger v1.2.28 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=537 Release Date: ============= 2012-04-30 Vulnerability Laboratory ID VL-ID: ==================================== 537...

Opial CMS v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Opial CMS v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=522 Release Date: ============= 2012-04-26 Vulnerability Laboratory ID VL-ID: ==================================== 522 Product &...