Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities

Document Title: =============== Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2055 Playlist: https://www.youtube.com/playlist?list=PL2hnNNM3yw-3svLm9UdSzvlVVZcx5DxV Videos:...

Wincor Nixdorf PC/E Mobile Cash TryOut - API Vulnerability

Document Title: =============== Wincor Nixdorf PC/E Mobile Cash TryOut - API Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2002 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ===================================...

Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2006 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5697 CVE-ID: ======= CVE-2018-5697 Release Date:...

Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities

Document Title: =============== Wickr Inc Bug Bounty Program - Zero Day Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2055 Playlist: https://www.youtube.com/playlist?list=PL2hnNNM3yw-3svLm9UdSzvlVVZcx5DxV Videos:...

Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Icyphoenix 2.2.0.105 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2006 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5697 CVE-ID: ======= CVE-2018-5697 Release Date:...

Magento Commerce - SSRF & XSPA Web Vulnerability

Document Title: =============== Magento Commerce - SSRF & XSPA Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ==================================== 1631 Comm...

Wincor Nixdorf PC/E Mobile Cash TryOut - API Vulnerability

Document Title: =============== Wincor Nixdorf PC/E Mobile Cash TryOut - API Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2002 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ===================================...

Salesforce Force (EventRSVP) - Multiple Web Vulnerabilities

Document Title: =============== Salesforce Force EventRSVP - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2057 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ====================================...

Wickr Inc - Zero Day Vulnerability Research Report P1

Document Title: =============== Wickr Inc - Zero Day Vulnerability Research Report P1 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1994 Document: https://www.vulnerability-lab.com/resources/documents/56129965121925.rar Key: 3986592835691561956295629856195 Videos:...

Wickr Inc - Zero Day Vulnerability Research Report P1

Document Title: =============== Wickr Inc - Zero Day Vulnerability Research Report P1 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1994 Document: https://www.vulnerability-lab.com/resources/documents/56129965121925.rar Key: 3986592835691561956295629856195 Videos:...

DVD Creator 4.1.0 - Insecure File Permissions Vulnerability

Document Title: =============== DVD Creator 4.1.0 - Insecure File Permissions Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2104 Release Date: ============= 2017-11-28 Vulnerability Laboratory ID VL-ID: ==================================...

DVD Creator 4.1.0 - Insecure File Permissions Vulnerability

Document Title: =============== DVD Creator 4.1.0 - Insecure File Permissions Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2104 Release Date: ============= 2017-11-28 Vulnerability Laboratory ID VL-ID: ==================================...

Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability

Document Title: =============== Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2102 Ticket:...

TinyWebGallery v2.4 (TWGE) - Persistent XSS Vulnerability

Document Title: =============== TinyWebGallery v2.4 TWGE - Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1997 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16635...

TinyWebGallery v2.4 (TWGE) - Persistent XSS Vulnerability

Document Title: =============== TinyWebGallery v2.4 TWGE - Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1997 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16635...

Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability

Document Title: =============== Perfect Privacy VPN Manager v1.10.11 - DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2102 Ticket:...

Oracle Flex Cube Direct BA v10.5 - Cross Site Vulnerability

Document Title: =============== Oracle Flex Cube Direct BA v10.5 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2101 Release Date: ============= 2017-10-31 Vulnerability Laboratory ID VL-ID: ==================================...

Oracle Flex Cube Direct BA v10.5 - Cross Site Vulnerability

Document Title: =============== Oracle Flex Cube Direct BA v10.5 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2101 Release Date: ============= 2017-10-31 Vulnerability Laboratory ID VL-ID: ==================================...

PayPal Inc #168 - Insufficient Authentication Vulnerability

Document Title: =============== PayPal Inc 168 - Insufficient Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2091 Release Date: ============= 2017-10-30 Vulnerability Laboratory ID VL-ID: ===================================...

Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2000 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16636 CVE-ID: ======= CVE-2017-16636 Release...

Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2000 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16636 CVE-ID: ======= CVE-2017-16636 Release...

PayPal Inc #168 - Insufficient Authentication Vulnerability

Document Title: =============== PayPal Inc 168 - Insufficient Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2091 Release Date: ============= 2017-10-30 Vulnerability Laboratory ID VL-ID: ===================================...

Huawei HG255s - Server Directory Traversal Vulnerability

Document Title: =============== Huawei HG255s - Server Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2099 Huawei Security ID: HWPSIRT-2017-06010 Video: https://www.vulnerability-lab.com/getcontent.php?id=2100 Release...

Huawei HG255s - Server Directory Traversal Vulnerability

Document Title: =============== Huawei HG255s - Server Directory Traversal Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2100 Video: https://www.youtube.com/watch?v=6XxTh7brPLg Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2099 Release...

Huawei HG255s - Server Directory Traversal Vulnerability

Document Title: =============== Huawei HG255s - Server Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2099 Huawei Security ID: HWPSIRT-2017-06010 Video: https://www.vulnerability-lab.com/getcontent.php?id=2100 Release...

Huawei HG255s - Server Directory Traversal Vulnerability

Document Title: =============== Huawei HG255s - Server Directory Traversal Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2100 Video: https://www.youtube.com/watch?v=6XxTh7brPLg Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2099 Release...

Telekom Magenta CMS - Multiple Cross Site Vulnerabilities

Document Title: =============== Telekom Magenta CMS - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2052 Telekom Security ID: 20161216SSc01 Release Date: ============= 2017-09-18 Vulnerability Laboratory ID VL-ID:...

OWASPZAP v2.5.0 - Remote Code Execution Vulnerability

Document Title: =============== OWASPZAP v2.5.0 - Remote Code Execution Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2096 Video: https://www.youtube.com/watch?v=41gr2XhSOw Release Date: ============= 2017-09-18 Vulnerability Laboratory ID VL-ID:...

MobaXtrem v10.4 - Remote Code Execution Vulnerability

Document Title: =============== MobaXtrem v10.4 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2097 Video: https://www.youtube.com/watch?v=FtBGmwFtRrE http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15376...

Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability

Document Title: =============== Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2094 MSRC Acknowledgements: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8710 Public...

Telekom Magenta CMS - Multiple Cross Site Vulnerabilities

Document Title: =============== Telekom Magenta CMS - Multiple Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2052 Telekom Security ID: 20161216SSc01 Release Date: ============= 2017-09-17 Vulnerability Laboratory ID VL-ID:...

Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability

Document Title: =============== Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2094 MSRC Acknowledgements: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8710 Public...

OWASPZAP v2.5.0 - Remote Code Execution Vulnerability

Document Title: =============== OWASPZAP v2.5.0 - Remote Code Execution Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2096 Video: https://www.youtube.com/watch?v=41gr2XhSOw Release Date: ============= 2017-09-17 Vulnerability Laboratory ID VL-ID:...

Microsoft Windows MSC XXE Data Exfiltration Vulnerability

Document Title: =============== Microsoft Windows MSC XXE Data Exfiltration Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2095 Video: https://www.youtube.com/watch?v=GmaNKZ0h3Yc Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2094 Release...

MobaXtrem v10.4 - Remote Code Execution Vulnerability

Document Title: =============== MobaXtrem v10.4 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2097 Video: https://www.youtube.com/watch?v=FtBGmwFtRrE http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15376...

Microsoft Windows MSC XXE Data Exfiltration Vulnerability

Document Title: =============== Microsoft Windows MSC XXE Data Exfiltration Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2095 Video: https://www.youtube.com/watch?v=GmaNKZ0h3Yc Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2094 Release...

Microsoft Info - Filter Bypass & Persistent Vulnerability

Document Title: =============== Microsoft Info - Filter Bypass & Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2023 MSRC ID: TRK:0901002416 Release Date: ============= 2017-09-06 Vulnerability Laboratory ID VL-ID:...

Shopware 5.2.5 & v5.3 - Multiple Cross Site Vulnerabilities

Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1922 Shopware Security Tracking ID: SW-19834 Security Update:...

Telekom Prepaid Shop - Multiple Persistent Vulnerabilities

Document Title: =============== Telekom Prepaid Shop - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2051 Telekom Security ID: 20170407TLu04 Release Date: ============= 2017-09-05 Vulnerability Laboratory ID VL-ID:...

Microsoft Info - Filter Bypass & Persistent Vulnerability

Document Title: =============== Microsoft Info - Filter Bypass & Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2023 MSRC ID: TRK:0901002416 Release Date: ============= 2017-09-05 Vulnerability Laboratory ID VL-ID:...

Telekom Prepaid Shop - Multiple Persistent Vulnerabilities

Document Title: =============== Telekom Prepaid Shop - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2051 Telekom Security ID: 20170407TLu04 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID:...

Play TV v1.25.1(Build r123776) - DLL Hijack Vulnerability

Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID: ====================================...

Shopware 5.2.5 & v5.3 - Multiple Cross Site Vulnerabilities

Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1922 Shopware Security Tracking ID: SW-19834 Security Update:...

Mozilla Firefox Web Browser v55.2 - Memory Corruption

Document Title: =============== Mozilla Firefox Web Browser v55.2 - Memory Corruption References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2093 Video: https://www.youtube.com/watch?v=eyA3YdHddS8 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID:...

Wibu Systems CodeMeter v6.50 - (UI) XSS Web Vulnerability

Document Title: =============== Wibu Systems CodeMeter v6.50 - UI XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2074 ID: FB49498 Acknowledgements: https://www.flickr.com/photos/vulnerabilitylab/36912680045/ Sources:...

Mozilla Firefox Web Browser v55.2 - Memory Corruption

Document Title: =============== Mozilla Firefox Web Browser v55.2 - Memory Corruption References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2093 Video: https://www.youtube.com/watch?v=eyA3YdHddS8 Release Date: ============= 2017-09-03 Vulnerability Laboratory ID VL-ID:...

Play TV v1.25.1(Build r123776) - DLL Hijack Vulnerability

Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-03 Vulnerability Laboratory ID VL-ID: ====================================...

Wibu Systems CodeMeter v6.50 - (UI) XSS Web Vulnerability

Document Title: =============== Wibu Systems CodeMeter v6.50 - UI XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2074 ID: FB49498 Acknowledgements: https://www.flickr.com/photos/vulnerabilitylab/36912680045/ Sources:...

Adobe Connect v9.6.1 - CSRF Token Web Vulnerability

Document Title: =============== Adobe Connect v9.6.1 - CSRF Token Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2086 Release Date: ============= 2017-08-31 Vulnerability Laboratory ID VL-ID: ==================================== 2086...

Android Studio 1-4 & 2.3.3 - Buffer Overflow Vulnerability

Document Title: =============== Android Studio 1-4 & 2.3.3 - Buffer Overflow Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2092 Video: https://www.youtube.com/watch?v=cdXChK64WLc Release Date: ============= 2017-08-30 Vulnerability Laboratory ID VL-ID:...