HITB Quartal Magazine - eZine Issue 006

Document Title: =============== HITB Quartal Magazine - eZine Issue 006 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/204.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-006.pdf Release Date: ============= 2011-06-16 Vulnerability...

Ahrare Andeysheh CMS - Multiple Web Vulnerabilities

Document Title: =============== Ahrare Andeysheh CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1827 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID: ==================================== 1827...

Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities

Document Title: =============== Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1779 View Video: https://www.youtube.com/watch?v=-XLlpnjZXFM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1778...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1711 View Video: https://www.youtube.com/watch?v=V-9lE1L3nq0 Apple Follow-up ID: 631627909 Advisory:...

Telegram (API) - Cross Site Request Forgery Vulnerabilities

Document Title: =============== Telegram API - Cross Site Request Forgery Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1648 Release Date: ============= 2016-01-17 Vulnerability Laboratory ID VL-ID: ====================================...

DELL Scrutinizer v12 - Persistent Software Vulnerability

Document Title: =============== DELL Scrutinizer v12 - Persistent Software Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1689 Video: https://www.youtube.com/watch?v=fcVox20f7ZI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1360 Release Dat...

PayPal Notify - Cross Site Request Forgery Vulnerability

Document Title: =============== PayPal Notify - Cross Site Request Forgery Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1584 Video: https://www.youtube.com/watch?v=1NO4I28J-0s Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID:...

PDF Shaper v3.5 - (MSF) Buffer Overflow Vulnerability

Document Title: =============== PDF Shaper v3.5 - MSF Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1579 Video: https://youtu.be/-HTEIisSiH8 Release Date: ============= 2015-08-16 Vulnerability Laboratory ID VL-ID:...

Airdroid iOS, Android & Win 3.1.3 - Persistent Vulnerability

Document Title: =============== Airdroid iOS, Android & Win 3.1.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1543 Release Date: ============= 2015-07-20 Vulnerability Laboratory ID VL-ID: ==================================...

PayPal Inc - (Merchant Search) CS Cross Site Vulnerability

Document Title: =============== PayPal Inc - Merchant Search CS Cross Site Vulnerability References: =========== Video: http://www.vulnerability-lab.com/getcontent.php?id=1454 View: https://www.youtube.com/watch?v=v5egy9VBs0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1453...

Facebook Parse - Secure & HTTP_only Bypass Vulnerability

Document Title: =============== Facebook Parse - Secure & HTTPonly Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1429 View Video: https://www.youtube.com/watch?v=1yUw7rtTTeI Release Date: ============= 2015-03-13 Vulnerability Laboratory ID VL-ID:...

CatBot v0.4.2 (PHP) - SQL Injection Vulnerability

Document Title: =============== CatBot v0.4.2 PHP - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1408 Release Date: ============= 2015-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 1408 Commo...

Heroku API Bug Bounty - Persistent Service Vulnerability

Document Title: =============== Heroku API Bug Bounty - Persistent Service Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1335 View: https://www.youtube.com/watch?v=kkRYASkAYCU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1300 Release Date...

PayPal Inc BB #88 - Bypass & Arbitrary Code Execution

Document Title: =============== PayPal Inc BB 88 - Bypass & Arbitrary Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=936 Video: http://www.vulnerability-lab.com/getcontent.php?id=1275 Release Date: ============= 2014-11-05 Vulnerability...

Folder Plus v2.5.1 iOS - Persistent Item Vulnerability

Document Title: =============== Folder Plus v2.5.1 iOS - Persistent Item Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1348 Release Date: ============= 2014-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 134...

iFunBox Free v1.1 iOS - File Include Vulnerability

Document Title: =============== iFunBox Free v1.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1344 Release Date: ============= 2014-10-20 Vulnerability Laboratory ID VL-ID: ==================================== 1344...

PayPal Inc BB - API Restriction Auth Bypass Vulnerability

Document Title: =============== PayPal Inc BB - API Restriction Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1338 View: https://www.youtube.com/watch?v=RXubXPr2M4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=895 Release Date:...

Microsoft Yammer - Bypass & Persistent Vulnerabilities

Document Title: =============== Microsoft Yammer - Bypass & Persistent Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1330 View: https://www.youtube.com/watch?v=0w8S3uryeII Advisory: http://www.vulnerability-lab.com/getcontent.php?id=976 Release Date:...

PayPal Inc BB #70 FR - Persistent Mail Vulnerability

Document Title: =============== PayPal Inc BB 70 FR - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=869 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-25 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #71 PPM - Persistent Filter Vulnerability

Document Title: =============== PayPal Inc BB 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...

WWW File Share Pro v7.0 - Remote Denial of Service

Document Title: =============== WWW File Share Pro v7.0 - Remote Denial of Service References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1309 View: https://www.youtube.com/watch?v=1Y-B7ctbixs Release Date: ============= 2014-08-29 Vulnerability Laboratory ID VL-ID:...

Barracuda Networks WSF - Filter Bypass & Persistent Bug

Document Title: =============== Barracuda Networks WSF - Filter Bypass & Persistent Bug References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1205 View: http://www.youtube.com/watch?v=1D9PS4bW8VM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=749 Release Date:...

Easy FTP Pro 4.2 iOS - Script Code Inject Vulnerabilities

Document Title: =============== Easy FTP Pro 4.2 iOS - Script Code Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-06 Vulnerability Laboratory ID VL-ID: ====================================...

Easy FTP Pro 4.2 iOS - Script Code Inject Vulnerabilities

Document Title: =============== Easy FTP Pro 4.2 iOS - Script Code Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-05 Vulnerability Laboratory ID VL-ID: ====================================...

PhotoSync Wifi&Bluetooth 1.0 - File Include Vulnerability

Document Title: =============== PhotoSync Wifi&Bluetooth 1.0 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1289 Release Date: ============= 2014-08-04 Vulnerability Laboratory ID VL-ID: ====================================...

PhotoSync Wifi&Bluetooth 1.0 - File Include Vulnerability

Document Title: =============== PhotoSync Wifi&Bluetooth 1.0 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1289 Release Date: ============= 2014-08-04 Vulnerability Laboratory ID VL-ID: ====================================...

Paypal Bug Bounty #36 - SecurityKey Card Vulnerability

Document Title: =============== Paypal Bug Bounty 36 - SecurityKey Card Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=834 Release Date: ============= 2014-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 834...

iOS 7.1.1 - Bypass Pass Code by Siri to access Addressbook

Document Title: =============== iOS 7.1.1 - Bypass Pass Code by Siri to access Addressbook References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1263 Video: https://www.youtube.com/watch?v=xs8bqenCf8A Source: https://www.youtube.com/user/sherifmorano Release Date: ===========...

PDF Album v1.7 iOS - File Include Web Vulnerability

Document Title: =============== PDF Album v1.7 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1255 Release Date: ============= 2014-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 1255...

Private Photo+Video v1.1 Pro iOS - Persistent Vulnerability

Document Title: =============== Private Photo+Video v1.1 Pro iOS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1249 Release Date: ============= 2014-04-01 Vulnerability Laboratory ID VL-ID: ===================================...

PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...

Facebook Bug Bounty - Redirect Web Vulnerabilities

Document Title: =============== Facebook Bug Bounty - Redirect Web Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1180 View Video1: http://www.youtube.com/watch?v=xBQYb5MUkk View Video2: http://www.youtube.com/watch?v=3P10Kd8m9bY View Video3:...

Paypal Inc BB #47 ALYZ - Persistent Search Vulnerability

Document Title: =============== Paypal Inc BB 47 ALYZ - Persistent Search Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=807 PayPal Security UID: dx1f89rtd Release Date: ============= 2013-11-18 Vulnerability Laboratory ID VL-ID:...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft SharePoint 2013 - Persistent Web Vulnerability

Document Title: =============== Microsoft SharePoint 2013 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=812 Security Bulletin: MS13-067 http://technet.microsoft.com/de-de/security/bulletin/MS13-067 Microsoft Security...

Department of Transport UK - SQL Injection Vulnerability

Document Title: =============== Department of Transport UK - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=732 Release Date: ============= 2013-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 73...

Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=775 BARRACUDA NETWORK SECURITY ID: BNSEC-723 Release Date: ============= 2013-07-19 Vulnerability Laboratory ID VL-ID:...

Dell PacketTrap PSA 7.1 - Multiple Web Vulnerabilities

Document Title: =============== Dell PacketTrap PSA 7.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=790 Release Date: ============= 2013-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 790...

Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities

Document Title: =============== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=833 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID: ====================================...

MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities

Document Title: =============== MyFolder FileManager 1.8 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1001 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 10...

Avira Analysis Web Service - SQL Injection Vulnerability

Document Title: =============== Avira Analysis Web Service - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=997 Public Video: http://www.youtube.com/watch?v=128cIzgt2EI Release Date: ============= 2013-07-07 Vulnerability...

Avira Analysis - Filter Bypass & SQL Injection Vulnerability

Document Title: =============== Avira Analysis - Filter Bypass & SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=998 Public Video: http://www.youtube.com/watch?v=128cIzgt2EI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=997...

AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities

Document Title: =============== AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=963 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 9...

File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities

Document Title: =============== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=939 Release Date: ============= 2013-05-04 Vulnerability Laboratory ID VL-ID: ====================================...

Paypal Bug Bounty #46 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 46 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=805 PayPal Security UID: esj1f86plc Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

Wireless Disk PRO v2.3 iPad iPhone - Multiple Vulnerabilities

Document Title: =============== Wireless Disk PRO v2.3 iPad iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=883 Release Date: ============= 2013-02-25 Vulnerability Laboratory ID VL-ID: ==================================...

WiFilet v1.2 iPad iPhone - Multiple Web Vulnerabilities

Document Title: =============== WiFilet v1.2 iPad iPhone - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=867 Release Date: ============= 2013-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 867...

PayPal Inc Exploitation Session - Bug Bounty Video 2012

Document Title: =============== PayPal Inc Exploitation Session - Bug Bounty Video 2012 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=773 View: http://www.youtube.com/watch?v=MM2JH9rQ7Io Advisories: http://www.vulnerability-lab.com/getcontent.php?id=634...

FortiMail IBE - Exception & Filter Bypass Vulnerability

Document Title: =============== FortiMail IBE - Exception & Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=772 Download: http://www.vulnerability-lab.com/resources/videos/772.wmv View: http://www.youtube.com/watch?v=5d7cIaM80oY Advisory:...

Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities

Document Title: =============== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=701 www.fortiguard.com/advisory/FG-IR-013-001.html Video: http://www.youtube.com/watch?v=5d7cIaM80oY Release Date:...