Account [RegistrationRole [Anonymous] Researcher: 1055 Advisories: 875 Documents: 32 Videos: 178 Date: 27.07.2016 TZ: 21:12

[ Home ] [ Upcoming ] [ Mobile ] [ Vendor ] [ Web-Application ] [ Remote ] [ Local ] [ Websites ] [ Documents ] [ Videos ] [ ? ]

[ Mobile Vulnerabilities ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-07-27Zoll Checklist v1.2.2 iOS - Multiple Persistent Vulnerabilities3.6Remote481Vulnerability-Lab
D2016-05-25Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability3.4Local5097Vulnerability-Lab
D2016-05-02WK UDID v1.0.1 iOS - Command Inject Vulnerability5.6Local19228Vulnerability-Lab
D2016-04-25Notes v4.5 iOS - Arbitrary File Upload Vulnerability6.4Remote6906Vulnerability-Lab
D2016-04-14C & C++ for OS - Filter Bypass & Persistent Vulnerability3.5Remote6440Vulnerability-Lab
D2016-04-05Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability3.5Remote7156Vulnerability-Lab
D2016-03-31Python v2.7 v1.5.4 iOS - Bypass & Persistent Vulnerability3.6Remote8374Vulnerability-Lab
D2016-02-28Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability3.5Local9060Vulnerability-Lab
D2016-02-22InstantCoder v1.0 iOS - Multiple Web Vulnerabilities6.6Remote9327Vulnerability-Lab
D2016-02-11HD Video Player v2.5 iOS - Multiple Web Vulnerabilities7.3Remote8161Vulnerability-Lab
D2016-02-10MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability3.6Remote8429Vulnerability-Lab
D2016-02-09File Sharing Manager v1.0 iOS - Multiple Web Vulnerabilities7.2Remote8521Vulnerability-Lab
Note: The mobile vulnerabilities section impact vulnerabilities in operating systems, applications, software & hardware.

[ Vendor Vulnerabilities ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-07-26Saveya Bounty #1 - Bypass & Persistent Vulnerability3.7Remote2605Benjamin K.M.
D2016-07-19Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability3.5Remote2440Benjamin K.M.
D2016-07-04IBM BlueMix Cloud - (API) Persistent Web Vulnerability3.7Remote5232DigvijaySingh
D2016-07-01Magento Bug Bounty #18 - Persistent Web Vulnerability3.5Remote4195Hadji Samir
D2016-06-27Ladesk Agent #1 - Session Reset Password Vulnerability8.7Remote5108Benjamin K.M.
D2016-06-07Microsoft Education - Code Execution Vulnerability8.6Remote11634Kieran Claessens
D2016-06-06Mapbox (API) - Filter Bypass & Persistent Vulnerability3.8Remote10078Benjamin K.M.
D2016-05-10Bugcrowd Bug Bounty #7 - Persistent Web Vulnerability3.8Remote6913Benjamin K.M.
D2016-05-09Skype Manager - (Email Change) Filter Bypass Vulnerability5.2Remote11698Karim Rahal
D2016-04-26Oracle Discoverer Viewer BI - Open Redirect Vulnerability2.8Remote10847Tommy DeVoss
D2016-04-25Sophos XG Firewall (SF01V) - Persistent Web Vulnerability3.5Remote11224Lawrence Amer
D2016-04-18Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities3.4Remote7671Lawrence Amer
Note: The vendor vulnerabilities section impact vulnerabilities in well-known or famous manufacturer products.

[ Web Application Vulnerabilities ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-07-27Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability4.5Remote234Benjamin K.M.
D2016-07-26DornCMS v1.4 - (FileManager) Persistent XSS Vulnerability4.3Remote350Benjamin K.M.
D2016-07-13Nusiorung CMS 2016 - (Login) Auth Bypass Vulnerability7.6Remote1437mr_mask_black
D2016-07-06Micron CMS v5.3 - (cat_id) SQL Injection Vulnerability6.8Remote2272mr_mask_black
D2016-07-04OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability3.1Remote2021ZwX
D2016-07-01KWSPHP CMS v1.6.995 - Persistent Cross Site Vulnerability3.5Remote2073ZwX
D2016-06-30iDesign CMS v2.7 - SQL Injection Web Vulnerability7Remote2308mr_mask_black
D2016-06-29Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability8.1Remote2231mr_mask_black
D2016-06-28Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities7.4Remote2435Iran Cyber Security
D2016-06-27Alfine CMS v2.6 - (Login) Auth Bypass Vulnerability8.1Remote2381mr_mask_black
D2016-06-21Mutualaid CMS v4.3.1 - SQL Injection Web Vulnerability7.6Remote2659mr_mask_black
D2016-06-13CM Ad Changer 1.7.7 WP Plugin - Cross Site Vulnerability3.5Remote3547Aaditya Purani
Note: The web-application vulnerabilities section impact only web vulnerabilities in web-applications products or services.

[ Remote Vulnerabilities ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-07-06Teampass 2.1.26 - Authenticated File Upload Vulnerability7.2Remote2617Peter Kok
D2016-07-05Teampass v2.1.26 - Privilege Escalate Vulnerability5.6Remote2291Peter Kok
D2016-05-18Teampass v2.1.25 - Unauthenticated Access Vulnerability6.8Remote5065Peter Kok
D2016-05-17Teampass v2.1.25 - Arbitrary File Download Vulnerability8.1Remote5739Peter Kok
D2016-03-06Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability 3Remote8382Lawrence Amer
D2016-02-10Apache Sling Framework v2.3.6 - Information Disclosure6.4Remote22241Ateeq Khan
D2016-02-03Compal ConnectBox - Wireless Passphrase Filter Bypass5.8Remote9717Marco Onorati
D2015-11-23Vbulletin 5.x - Remote Code Execution Exploit (PL)8.3Remote16123Reza Espargham
D2015-10-06W150D Wireless N 150 ADSL2 Modem Router Vulnerability2.4Remote16821Lawrence Amer
D2015-09-03Zhone ADSL2+ 4P Bridge&Router - Multiple Vulnerabilities8.8Remote17922Mahmoud Khaled
D2015-08-16PDF Shaper v3.5 - (MSF) Buffer Overflow Vulnerability7.9Remote17755metacom
D2015-08-15MS HTA (HTML Application) - Code Execution (MS14-064)9.3Remote18482Reza Espargham
Note: The remote vulnerabilities section impact only remote exploitable vulnerabilities in software products or services.

[ Local Vulnerabilities ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-07-27Zortam Media Studio 20.60 - Buffer Overflow Vulnerability6.5Local270ZwX
D2016-07-26VUPlayer 2.49 - (.wax) Buffer Overflow Vulnerability6.4Local502ZwX
D2016-07-25VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability6.4Local568ZwX
D2016-06-13FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability5.1Local4653Benjamin K.M.
D2015-12-01Aeris Calandar v2.1 - Buffer Overflow Vulnerability6.4Local13968ZwX
D2015-11-26POP Peeper 4.0.1 - Persistent Code Execution Vulnerability5.7Local14234ZwX
D2015-11-23Switch v4.68 - Code Execution Vulnerability8.2Local15180ZwX
D2015-11-22SoundTap 2.27 - Code Execution Vulnerability8.1Local14663ZwX
D2015-10-19Free WMA MP3 Converter - Buffer Overflow Exploit (SEH)7.5Local16709ZwX
D2015-10-12Freemake VideoDownloader 3.7.1 - Code Execution8.8Local16632ZwX
D2015-10-09Freemake Video Converter 4.1.7 - Code Execution8.8Local16566ZwX
D2015-10-06FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow7.2Local16752ZwX
Note: The local vulnerabilities section impact only the local exploitable vulnerabilities in software products or services.

[ Website Vulnerabilities ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-07-07BMW ConnectedDrive - (Update) VIN Session Vulnerability6Remote19417Benjamin K.M.
D2016-07-06BMW - (Token) Client Side Cross Site Scripting Vulnerability3.6Remote15776Benjamin K.M.
D2016-05-25AVAST (Shop) #18 - Multiple Client Side XSS Vulnerabilities3.3Remote14992Karim Rahal
D2016-05-24AVAST (Business) #17 - Persistent Web Vulnerability3.7Remote14786Karim Rahal
D2016-05-23AVAST Business #14 - Client Side Cross Site Vulnerability3.3Remote15194Kieran Claessens
D2016-05-10Trend Micro (Direct Pass) - Persistent Web Vulnerability3.7Remote8932Karim Rahal
D2016-05-09Stanford University - Multiple SQL Injection Vulnerabilities7.8Remote8798Benjamin K.M.
D2016-05-01Trend Micro Direct Pass - Bypass & Cross Site Vulnerability4.3Remote9411Karim Rahal
D2016-04-25Trend Micro (Account) - Email Spoofing Web Vulnerability4.6Remote9599Hadji Samir
D2016-04-19AVAST #13 - Persistent Cross Site Scripting Vulnerability3.2Remote14635Karim Rahal
D2016-04-18AVAST (My) #15 - (frontend.exception) CS XSS Vulnerability3.3Remote14606Kieran Claessens
D2016-04-17Spotify ArtistExplorer BB #1 - Cross Site Script Vulnerability3.5Remote9453Karim Rahal
Note: The website vulnerabilities section impact vulnerabilities in website services and well-known service applications.

[ IT-Security Documents ]

DDateRAdvisory NameVSTypeViewsAuthor
D2015-11-17Mobile Application Security - Main Issues & Vulnerabilities3.3Report15528Vulnerability-Lab
D2015-08-09Bettercap - New MITM Framework3.5Tutorial18337Rajivarnan R.
D2015-01-30Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure6.8Report23018Rajivarnan R.
D2014-07-29Wickr Announcement - Bug Bounty Program 2014RReport24130Wickr Security
D2014-05-12Vulnerable Workers in Uncertain Times - 4th Conference CFPRReport28105ADAPT IT
D2014-04-09HeartBleed SSL CVE 20140160 - 10 Steps to Fix in UbuntuRReport25942Vulnerability-Lab
D2014-03-26ES746 Support-Bulletin - EMS Vulnerability Resolved3.5Bulletins25487Vulnerability-Lab
D2014-03-13RFP - External Network Vulnerability Assessment & PenTestRReport25644Ismail Kaleem
D2014-01-31HackInTheBox Quartal Magazine - eZine Issue 10RMagazin25552HITB TEAM
D2013-05-28Filter Evasion and Bypass Methods - Pentest MagazineRReport31213Vulnerability-Lab
D2012-11-30HackInTheBox Quartal Magazine - eZine Issue 09RMagazin27822HITB TEAM
D2012-11-26Security in a serious way [THN] - eZine Issue 014RMagazin27519THN TEAM
Note: The documents section impact security reports, security analysis, vulnerability analysis or research reportages.

[ IT-Security Videos ]

DDateRAdvisory NameVSTypeViewsAuthor
D2016-06-27Bitdefender Bug Bounty PenTest Video - 4 Vulnerabilities5.3Remote2050Hadji Samir
D2016-04-26NVV Ticket Krauth ATM - (NaN) Devide by Zero Vulnerability6Local6429Vulnerability-Lab
D2016-04-25Prezi Desktop Client - Persistent Cross Site Vulnerabilities3.6Remote6025Milan A Solanki
D2016-03-30PayPal Bug Bounty #121 - Bypass & Persistent Vulnerability3.7Remote8361Benjamin K.M.
D2016-03-06Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities6.4Local10088Vulnerability-Lab
D2016-02-23Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability3.9Remote8575Milan A Solanki
D2016-02-22UBNT AirCRM - 3 x Persistent Cross Site Scripting3.8Remote8543Milan A Solanki
D2016-02-18ifixit Bug Bounty #6 - (Profile) Persistent Vulnerability3.6Remote7978Hadji Samir
D2016-02-17ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability3.8Remote7875Hadji Samir
D2016-02-04Apple iOS v9.x - Application Update Loop Pass Code Bypass6Local9199Vulnerability-Lab
D2016-02-02Compal ConnectBox - Passphrase Filter Bypass Vulnerability5.8Remote8612Marco Onorati
D2016-02-01PayPal #123 - Security Key Pin Approval & Expire Bypass5.6Remote9542Vulnerability-Lab
Note: The security video section demonstrates live hacks, proof of concepts, reproduce videos & exploitation videos.

[ Search ] [ News ] [ Submit ] [ Stats ] [ Team ] [ Partner ] [ Talks & Workshop ] [ Awards ] [ Customer ] [ Contact ] [ Impressum ]

[MAGAZINE] [July] 18 Critical: 0 High: 7 Medium: 11 Low: 0 Best Researcher: [mr_mask_black] Threat: