Clean Master v1.0 - Unquoted Path Privilege Escalation

Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Kaspersky Company Account - Response XSS Vulnerability

Document Title: =============== Kaspersky Company Account - Response XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1934 Video: https://www.vulnerability-lab.com/getcontent.php?id=1977 Release Date: ============= 2016-08-29...

PayPal Inc BB #88 - Bypass & Arbitrary Code Execution

Document Title: =============== PayPal Inc BB 88 - Bypass & Arbitrary Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=936 Video: http://www.vulnerability-lab.com/getcontent.php?id=1275 Release Date: ============= 2014-11-05 Vulnerability...

PayPal Inc BB #107 MOS - Persistent History Vulnerability

Document Title: =============== PayPal Inc BB 107 MOS - Persistent History Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1048 PayPal Security UID: dq115aYq Release Date: ============= 2014-10-27 Vulnerability Laboratory ID VL-ID:...

Paypal MOS API - Bypass & Persistent XML Vulnerability

Document Title: =============== Paypal MOS API - Bypass & Persistent XML Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1129 PayPal Security UID: TM13a2uL Release Date: ============= 2014-10-14 Vulnerability Laboratory ID VL-ID:...

Cyberoam UTM Appliance - SQL Injection Vulnerability

Document Title: =============== Cyberoam UTM Appliance - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=60 Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 60...

Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability

Document Title: =============== Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2094 MSRC Acknowledgements: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8710 Public...

Totemomail v4.x & v5.x - Bypass & Persistent Vulnerability

Document Title: =============== Totemomail v4.x & v5.x - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1769 Release Date: ============= 2016-04-08 Vulnerability Laboratory ID VL-ID: ====================================...

Criminals Minds - S10 E3 HackInTheBox & Benjamin Mejri

Document Title: =============== Criminals Minds - S10 E3 HackInTheBox & Benjamin Mejri References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1530 View Video: https://www.youtube.com/watch?v=Ny-z5Kp6NFI Release Date: ============= 2015-06-13 Vulnerability Laboratory ID VL-ID:...

Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability

Document Title: =============== Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1256 Video: http://www.vulnerability-lab.com/getcontent.php?id=1257 Release Date: ============= 2014-04-10...

Microsoft Yammer SN - oAuth Bypass Token Vulnerability

Document Title: =============== Microsoft Yammer SN - oAuth Bypass Token Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1043 View: http://www.youtube.com/watch?v=SwxWNvmOsU4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1003 Microsoft...

FTP Explorer v10.5.19.1 - Buffer Overflow Vulnerability

Document Title: =============== FTP Explorer v10.5.19.1 - Buffer Overflow Vulnerability Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 110 Product & Service Introduction: =============================== FTP Explorer is an FTP client...

Lenovo SU v5.07 - Buffer Overflow & Code Execution

Document Title: =============== Lenovo SU v5.07 - Buffer Overflow & Code Execution References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2131 Lenovo Security ID: LEN-19625 https://nvd.nist.gov/vuln/detail/CVE-2018-9063...

Acadmic Microsoft - (API) Filter Cross Site Vulnerability

Document Title: =============== Acadmic Microsoft - API Filter Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2056 MSRC ID: 0001010174 Release Date: ============= 2018-01-20 Vulnerability Laboratory ID VL-ID:...

MagicSpam 2.0.13 - Insecure File Permission Vulnerability

Document Title: =============== MagicSpam 2.0.13 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2113 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5693 CVE-ID: ======= CVE-2018-5693 Release Date:...

Magento Commerce - SSRF & XSPA Web Vulnerability

Document Title: =============== Magento Commerce - SSRF & XSPA Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ==================================== 1631 Comm...

VLC Media Player v2.2.6 Umbrella - DoS Vulnerability

Document Title: =============== VLC Media Player v2.2.6 Umbrella - DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2088 Video: https://www.youtube.com/watch?v=BVcTEGVB6s Release Date: ============= 2017-08-17 Vulnerability Laboratory ID VL-ID:...

Adobe Connect & Desktop v9.5.6 - Persistent Vulnerability

Document Title: =============== Adobe Connect & Desktop v9.5.6 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1838 Security ID: PSIRT-5180 Bulletin: https://helpx.adobe.com/security/products/connect/apsb16-35.html Vulnerabilit...

Microsoft Skype Mobile v8.x - Emoticons DoS Vulnerability

Document Title: =============== Microsoft Skype Mobile v8.x - Emoticons DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2116 Video: https://www.vulnerability-lab.com/getcontent.php?id=2117 MSRC ID: 43520 CRM:0461036906 Acknowledgements...

Magento Commerce - CSRLF Web UI Security Vulnerability

Document Title: =============== Magento Commerce - CSRLF Web UI Security Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1573 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID: ==================================== 157...

FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue

Document Title: =============== FLV To MP3 Converter 3.0.5 - Reverse Engineering Issue References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1938 Release Date: ============= 2016-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability

Document Title: =============== Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID: ====================================...

Trend Micro (SSO) - SSO Redirect & Session Vulnerability

Document Title: =============== Trend Micro SSO - SSO Redirect & Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1694 Trand Micro ID: 1-1-1035080936 Release Date: ============= 2016-03-30 Vulnerability Laboratory ID VL-ID:...

Pinterest Bug Bounty #1 - Persistent CNAME Vulnerability

Document Title: =============== Pinterest Bug Bounty 1 - Persistent CNAME Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1431 Release Date: ============= 2015-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Barracuda WAF & LB #37 - Persistent Vulnerabilities

Document Title: =============== Barracuda WAF & LB 37 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1103 Barracuda Networks Security ID BNSEC: BNSEC-1263 https://www.barracuda.com/support/knowledgebase/501600000013gvr...

Paypal BBP #108 MOS - Persistent Web Vulnerability

Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-07 Vulnerability Laboratory ID VL-ID:...

Secunia.com CSI/VIM - Persistent Validation Vulnerabilities

Document Title: =============== Secunia.com CSI/VIM - Persistent Validation Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1272 Article:...

SonicWall Backend Server - CS Cross Site Web Vulnerability

Document Title: =============== SonicWall Backend Server - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1100 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2589...

Telekom Bug Bounty #12 - File Include Web Vulnerability

Document Title: =============== Telekom Bug Bounty 12 - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1178 Release Date: ============= 2014-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 117...

Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities

Document Title: =============== Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=526 Release Date: ============= 2012-06-15 Vulnerability Laboratory ID VL-ID: ==================================== 526 Comm...

NexorONE Online Banking - Multiple Cross Site Vulnerabilities

Document Title: =============== NexorONE Online Banking - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=304 Release Date: ============= 2012-02-04 Vulnerability Laboratory ID VL-ID: ==================================...

Mahara v19.10.2 CMS - Persistent Cross Site Vulnerability

Document Title: =============== Mahara v19.10.2 CMS - Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2217 Release Date: ============= 2020-04-20 Vulnerability Laboratory ID VL-ID: ====================================...

Swift File Transfer Mobile - Multiple Web Vulnerabilities

Document Title: =============== Swift File Transfer Mobile - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2205 Release Date: ============= 2020-04-16 Vulnerability Laboratory ID VL-ID: ====================================...

PayPal Inc BB - Arbitrary File Upload Vulnerability

Document Title: =============== PayPal Inc BB - Arbitrary File Upload Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2180 Video: https://www.youtube.com/watch?v=kcnJMKXnW1k Release Date: ============= 2019-02-01 Vulnerability Laboratory ID VL-ID:...

Adobe Systems - Arbitrary Code Injection Vulnerability

Document Title: =============== Adobe Systems - Arbitrary Code Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2120 PSIRT ID: 7873 Vulnerability Magazine:...

Photo Vault v1.2 iOS - Insecure Authentication Vulnerability

Document Title: =============== Photo Vault v1.2 iOS - Insecure Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2110 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20371 CVE-ID: ======= CVE-2018-20371 Release Date:...

Huawei HG255s - Server Directory Traversal Vulnerability

Document Title: =============== Huawei HG255s - Server Directory Traversal Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2100 Video: https://www.youtube.com/watch?v=6XxTh7brPLg Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2099 Release...

Stanford University (MBC) - SQL Injection Web Vulnerability

Document Title: =============== Stanford University MBC - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2004 ID: INC000003888376 Release Date: ============= 2017-05-03 Vulnerability Laboratory ID VL-ID:...

Joomla com_redshop 1.4&1.5 - SQL Injection Vulnerability

Document Title: =============== Joomla comredshop 1.4&1.5 - SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2038 Release Date: ============= 2017-02-22 Vulnerability Laboratory ID VL-ID: ====================================...

FortiVoice v5.0 - Filter Bypass & Persistent Vulnerability

Document Title: =============== FortiVoice v5.0 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1842 Fortinet PSIRT ID: 1737213 Bulletin:...

Dorsa Web CMS - Multiple SQL Injection Vulnerabilities

Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Top Business Advertising - SQL Injection Vulnerabilities

Document Title: =============== Top Business Advertising - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1786 Release Date: ============= 2016-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

Paypal Inc - Open Redirect Web Vulnerability

Document Title: =============== Paypal Inc - Open Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1598 Vulnerability Magazine:...

TORNADO Computer Trading - SQL Injection Vulnerability

Document Title: =============== TORNADO Computer Trading - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1489 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 148...

Facebook BB #18 - IDOR Issue & Privacy Vulnerability

Document Title: =============== Facebook BB 18 - IDOR Issue & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1371 Facebook Security ID: 219208937 Release Date: ============= 2014-12-12 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #85 MB iOS 4.6 - Auth Bypass Vulnerability

Document Title: =============== PayPal Inc BB 85 MB iOS 4.6 - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=895 PayPal Security UID: Vxda0S Video: http://www.vulnerability-lab.com/getcontent.php?id=1338 View:...

Paypal BB #108 MOS - Bypass & Persistent Vulnerability

Document Title: =============== Paypal BB 108 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Video: http://www.vulnerability-lab.com/getcontent.php?id=1273 Video Demonstration:...

Boonex Dolphin v7.0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== Boonex Dolphin v7.0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=565 Changeset 16256 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID:...

osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Document Title: =============== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=497 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 497...

Axence nVision v4.1 - Memory Corruption Vulnerability

Document Title: =============== Axence nVision v4.1 - Memory Corruption Vulnerability Release Date: ============= 2011-09-01 Vulnerability Laboratory ID VL-ID: ==================================== 6 Product & Service Introduction: =============================== Proactive network monitoring,...