Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1766 View Video: https://www.youtube.com/watch?v=QKSQvP5xGY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Dat...

UBNT AirCRM - 3 x Persistent Cross Site Scripting

Document Title: =============== UBNT AirCRM - 3 x Persistent Cross Site Scripting References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1739 Video View: https://www.youtube.com/watch?v=5uiXWxJzNFk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1728 Release Date:...

Prezi Bug Bounty #5 - CS Cross Site & Redirect Vulnerability

Document Title: =============== Prezi Bug Bounty 5 - CS Cross Site & Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1724 Release Date: ============= 2016-02-19 Vulnerability Laboratory ID VL-ID: ===================================...

Spotify - CSRF & Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

Magento Bug Bounty - Cross Site Cross Site Vulnerability

Document Title: =============== Magento Bug Bounty - Cross Site Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1642 Video: https://www.youtube.com/watch?v=VDXeLSmgxIQ APPSEC-1126 Release Date: ============= 2015-11-11 Vulnerability Laboratory I...

BlinkSale Bug Bounty #2 - Cross Site Scripting Vulnerability

Document Title: =============== BlinkSale Bug Bounty 2 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1448 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID: ===================================...

My.WiFi USB Drive v1.0 iOS - File Upload Web Vulnerability

Document Title: =============== My.WiFi USB Drive v1.0 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1589 Release Date: ============= 2015-09-24 Vulnerability Laboratory ID VL-ID: ====================================...

ChiefPDF Software v2.x - Buffer Overflow Vulnerability

Document Title: =============== ChiefPDF Software v2.x - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1578 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ==================================== 157...

AdHocMate v1.0 iOS - Persistent Mail Encode Vulnerability

Document Title: =============== AdHocMate v1.0 iOS - Persistent Mail Encode Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1559 Release Date: ============= 2015-07-27 Vulnerability Laboratory ID VL-ID: ====================================...

ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability

Document Title: =============== ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1555 Release Date: ============= 2015-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 1555...

Tango FTP Software v1.0 - Activex Heap Spray Exploit

Document Title: =============== Tango FTP Software v1.0 - Activex Heap Spray Exploit References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1528 View Video: https://www.youtube.com/watch?v=evhZlYyliU Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID:...

Ebay Inc Magento #10 - Persistent Filename Vulnerability

Document Title: =============== Ebay Inc Magento 10 - Persistent Filename Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1458 Video: https://www.youtube.com/watch?v=WffsHd8pibE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1457 EIBBP-31603...

PDF Converter & Editor 2.1 iOS - File Include Vulnerability

Document Title: =============== PDF Converter & Editor 2.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1480 Release Date: ============= 2015-05-06 Vulnerability Laboratory ID VL-ID: ===================================...

Grindr Bug Bounty - Denial of Service Vulnerability

Document Title: =============== Grindr Bug Bounty - Denial of Service Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1490 Video: https://www.youtube.com/watch?v=tqc5IacqXA Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID:...

Facebook BBP #16 (Studio) - Persistent Vulnerability

Document Title: =============== Facebook BBP 16 Studio - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1368 Facebook Security ID: 219162244 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID:...

WebDisk+ v2.1 iOS - Unrestricted File Upload Vulnerability

Document Title: =============== WebDisk+ v2.1 iOS - Unrestricted File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1349 Release Date: ============= 2014-10-22 Vulnerability Laboratory ID VL-ID: ====================================...

iFunBox Free v1.1 iOS - File Include Vulnerability

Document Title: =============== iFunBox Free v1.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1344 Release Date: ============= 2014-10-20 Vulnerability Laboratory ID VL-ID: ==================================== 1344...

PayPal Inc BB #96 - Persistent Tags Vulnerability

Document Title: =============== PayPal Inc BB 96 - Persistent Tags Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=954 PayPal Security UID: apf87gW Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability

Document Title: =============== PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1274 http://www.vulnerability-lab.com/getcontent.php?id=940 Video: https://www.youtube.com/watch?v=IXhwfZV6x0M Release Date:...

Privacy Pro v1.2 HZ iOS - File Include Web Vulnerability

Document Title: =============== Privacy Pro v1.2 HZ iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1267 Release Date: ============= 2014-05-22 Vulnerability Laboratory ID VL-ID: ====================================...

PDF Album v1.7 iOS - File Include Web Vulnerability

Document Title: =============== PDF Album v1.7 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1255 Release Date: ============= 2014-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 1255...

FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability

Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

jDisk (stickto) v2.0.3 iOS - Multiple Web Vulnerabilities

Document Title: =============== jDisk stickto v2.0.3 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1196 Release Date: ============= 2014-02-11 Vulnerability Laboratory ID VL-ID: ==================================== 11...

Microsoft Yammer - Persistent Profile Vulnerabilities

Document Title: =============== Microsoft Yammer - Persistent Profile Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=978 MSRC ID: 14808 Release Date: ============= 2013-12-11 Vulnerability Laboratory ID VL-ID:...

Feetan Inc WireShare v1.9.1 iOS - Persistent Vulnerability

Document Title: =============== Feetan Inc WireShare v1.9.1 iOS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1157 Release Date: ============= 2013-12-05 Vulnerability Laboratory ID VL-ID: ====================================...

ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Vulnerability

Document Title: =============== ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1122 Release Date: ============= 2013-10-28 Vulnerability Laboratory ID VL-ID: ====================================...

OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability

Document Title: =============== OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1110 Release Date: ============= 2013-10-12 Vulnerability Laboratory ID VL-ID:...

Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass

Document Title: =============== Apple iOS 7.0.2 iP 5S - Sim Lock Screen Display Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1104 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: https://www.youtube.com/watch?v=6e-hvglQdg Release Date:...

Apple iOS v7.0 iPad with Face Time - Privacy Image Issue

Document Title: =============== Apple iOS v7.0 iPad with Face Time - Privacy Image Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1091 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1087 Video: http://www.youtube.com/watch?v=7acWAEZpbgs Release Date...

Facebook - Private Message (Attachment ID) Vulnerability

Document Title: =============== Facebook - Private Message Attachment ID Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1087 View: http://www.youtube.com/watch?v=azzZ7KDMMKw Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID:...

Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1047 Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID: ====================================...

Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1044 Release Date: ============= 2013-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 104...

WebDisk 3.0.2 PV iOS - Command Execution Vulnerability

Document Title: =============== WebDisk 3.0.2 PV iOS - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1035 Release Date: ============= 2013-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 103...

Photo Server 2.0 iOS - Multiple Critical Vulnerabilities

Document Title: =============== Photo Server 2.0 iOS - Multiple Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1029 Release Date: ============= 2013-07-22 Vulnerability Laboratory ID VL-ID: ====================================...

Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=981 Mozilla Bug ID: 835445 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID:...

Avira Analysis Web Service - SQL Injection Vulnerability

Document Title: =============== Avira Analysis Web Service - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=997 Public Video: http://www.youtube.com/watch?v=128cIzgt2EI Release Date: ============= 2013-07-07 Vulnerability...

MSN Hotmail - Password Reset (Session) Web Vulnerability

Document Title: =============== MSN Hotmail - Password Reset Session Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=994 Video: https://www.youtube.com/watch?v=INq6CirLgt0 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID:...

iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== iGet Sharp v1.1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=991 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 991...

Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=777 BARRACUDA NETWORK SECURITY ID: BNSEC-834 Release Date: ============= 2013-06-20 Vulnerability Laboratory ID VL-ID:...

Paypal BugBounty #13 - Mail Encoding Web Vulnerability

Document Title: =============== Paypal BugBounty 13 - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=650 PayPal Security UID: cga1a7oh Release Date: ============= 2013-06-17 Vulnerability Laboratory ID VL-ID:...

Microsoft Office 365 Outlook - CS Redirect Vulnerability

Document Title: =============== Microsoft Office 365 Outlook - CS Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=815 Microsoft Security Response Center MSRC ID: 14091 Microsoft Security Response Center MSRC MANAGER: JT Release Dat...

Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities

Document Title: =============== Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 Trend Micro Reference:...

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities

Document Title: =============== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=850 Release Date: ============= 2013-02-07 Vulnerability Laboratory ID VL-ID: ===================================...

HackInTheBox Quartal Magazine - eZine Issue 09

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 09 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/HITB-Ezine-Issue-009.pdf Release Date: ============= 2012-11-30 Vulnerability...

Skype Community - Mail Encoding Web Vulnerability #2

Document Title: =============== Skype Community - Mail Encoding Web Vulnerability 2 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=719 MICROSOFT SECURITY RESPONSE CENTER MSRC ID: 13022 & 13034 Release Date: ============= 2012-11-20 Vulnerability...

Skype Account Service - Session Token Bypass Vulnerability

Document Title: =============== Skype Account Service - Session Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=762 http://www.vulnerability-lab.com/getcontent.php?id=739 MSRC ID: 13175 Release Date: ============= 2012-11-14...

AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=741 Release Date: ============= 2012-11-04 Vulnerability Laboratory ID VL-ID: ==================================== 741...

AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=741 Release Date: ============= 2012-11-04 Vulnerability Laboratory ID VL-ID: ==================================== 741...