[ Web Application Vulnerabilities ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-06-09		Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities	5.3	Remote	2059	N/A - Anonymous
D	2017-06-08		Composr CMS v10.0.0 - Cross Site Scripting Vulnerability	3.3	Remote	1939	Benjamin K.M.
D	2017-06-07		Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability	3.3	Remote	2005	Benjamin K.M.
D	2017-06-06		Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities	5.3	Remote	2345	Benjamin K.M.
D	2017-05-29		Perch v3.0.3 CMS - Multiple Web Vulnerabilities	3.8	Remote	2594	S.AbenMassaoud
D	2017-05-23		Wordpress Contentive Theme - Cross Site Web Vulnerability	3.2	Remote	2417	ZwX
D	2017-05-21		Simple ASC CMS v1.2 - (Guestbook) Persistent Vulnerability	3.8	Remote	2345	Benjamin K.M.
D	2017-05-16		WP Newsletter Supsystic 1.1.7 - Cross Site Vulnerability	3.2	Remote	2661	King Coder
D	2017-05-15		Wordpress EELV Newsletter v4.5 - Multiple Vulnerabilities	3.3	Remote	2781	King Coder
D	2017-05-02		Joomla com_tag v1.7.6 - (tag) SQL Injection Vulnerability	6.6	Remote	3436	IEDB Team
D	2017-03-29		Arachni v1.5-0.5.11 - Persistent Cross Site Vulnerability	2.2	Remote	4613	Peter Kok
D	2017-03-20		Zenario v7.6 - (Delete) Persistent Cross Site Vulnerability	3.6	Remote	4482	Benjamin K.M.

Note: The web-application vulnerabilities section impact only web vulnerabilities in web-applications products or services.

[ Vendor Vulnerabilities ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-06-21		PayPal Inc BB #149 - (Gift) Insufficient Authentication	4.2	Remote	1091	Chamli
D	2017-02-09		Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities	4.3	Remote	4126	Benjamin K.M.
D	2017-01-16		Apple iOS (Notify iTunes) - Bypass & Persistent Vulnerability	4.4	Remote	5966	Benjamin K.M.
D	2017-01-11		Salesforce (Event Registration) - Persistent Vulnerability	3.8	Remote	4628	Benjamin K.M.
D	2017-01-09		Bit Defender #39 - Auth Token Bypass Vulnerability	5.9	Remote	15670	Lawrence Amer
D	2016-11-14		Adobe Marketing Cloud - Bypass & Persistent Vulnerability	3.5	Remote	4711	Benjamin K.M.
D	2016-11-09		Adobe Connect & Desktop v9.5.6 - Persistent Vulnerability	4.3	Remote	11965	Benjamin K.M.
D	2016-11-04		Edusson (Robotdon) BB - Client Side Cross Site Vulnerability	3.4	Remote	7155	Benjamin K.M.
D	2016-11-03		Edusson (Robotdon) BB - Bypass & Persistent Vulnerability	4.3	Remote	6997	Benjamin K.M.
D	2016-10-10		Facebook API v2.1 - RFC6749 Open Redirect Vulnerability	3.2	Remote	7389	S.AbenMassaoud
D	2016-10-04		Cyberoam iview UTM v0.1.2.7 - (Ajax) XSS Web Vulnerability	3.3	Remote	10091	Lawrence Amer
D	2016-08-22		Edmodo BB#1 - Persistent Input Validation Vulnerability	3.3	Remote	6444	S.AbenMassaoud

Note: The vendor vulnerabilities section impact vulnerabilities in well-known or famous manufacturer products.

[ Remote Vulnerabilities ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-01-12		Huawei Flybox B660 - (POST SMS) CSRF Web Vulnerability	4.4	Remote	5781	S.AbenMassaoud
D	2017-01-10		Huawei Flybox B660 - (POST Reboot) CSRF Vulnerability	4.4	Remote	5057	S.AbenMassaoud
D	2016-11-28		Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability	3.5	Remote	6286	Lawrence Amer
D	2016-11-18		Huawei Flybox B660 Router - Auth Bypass Vulnerability	7.4	Remote	5636	S.AbenMassaoud
D	2016-07-06		Teampass 2.1.26 - Authenticated File Upload Vulnerability	7.2	Remote	8293	Peter Kok
D	2016-07-05		Teampass v2.1.26 - Privilege Escalate Vulnerability	5.6	Remote	7487	Peter Kok
D	2016-05-18		Teampass v2.1.25 - Unauthenticated Access Vulnerability	6.8	Remote	9747	Peter Kok
D	2016-05-17		Teampass v2.1.25 - Arbitrary File Download Vulnerability	8.1	Remote	10713	Peter Kok
D	2016-03-07		Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability	3	Remote	12885	Lawrence Amer
D	2016-02-10		Apache Sling Framework v2.3.6 - Information Disclosure	6.4	Remote	27150	Ateeq Khan
D	2016-02-03		Compal ConnectBox - Wireless Passphrase Filter Bypass	5.8	Remote	15224	Marco Onorati
D	2015-11-23		Vbulletin 5.x - Remote Code Execution Exploit (PL)	8.3	Remote	21080	Reza Espargham

Note: The remote vulnerabilities section impact only remote exploitable vulnerabilities in software products or services.

[ Local Vulnerabilities ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-06-26		Microsoft Skype v7.3.6 - Stack Buffer Overflow Vulnerability	7.2	Local	986	Benjamin K.M.
D	2017-05-22		HTTrack v3.x - Stack Buffer Overflow Vulnerability	6.1	Local	2771	Hosein Askari
D	2017-05-09		MikroTik RouterBoard v6.38.5 - Denial of Service	3.8	Remote	3436	Hosein Askari
D	2017-05-04		Mozilla Firefox v52.02 - (Stack Overflow) DoS Vulnerability	3	Local	3463	S.AbenMassaoud
D	2017-05-03		Hola VPN v1.34 - Privilege Escalation Vulnerability	3.2	Local	3491	S.AbenMassaoud
D	2017-04-27		Icecream v4.53 & Pro - File Permission Privilege Escalation	4.1	Local	2556	S.AbenMassaoud
D	2017-03-29		Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities	5.2	Local	3946	S.AbenMassaoud
D	2017-01-30		PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow	5.9	Local	4339	Benjamin K.M.
D	2017-01-09		Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability	5.8	Local	3994	S.AbenMassaoud
D	2016-11-17		Apple iOS 10.1 - Multiple Access Permission Vulnerabilities	6.3	Local	7835	Benjamin K.M.
D	2016-11-14		Reason Core Security v1.2.0.1 - Path Privilege Escalation	4	Local	4284	ZwX
D	2016-11-02		Intel(R) HD Graphics 10 - Path Privilege Escalation	4.3	Local	4273	ZwX

Note: The local vulnerabilities section impact only the local exploitable vulnerabilities in software products or services.

[ Mobile Vulnerabilities ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-02-23		Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability	7	Remote	5153	Benjamin K.M.
D	2017-02-22		Air Transfer 1.2.1 & 1.0.14 - Multiple XSS Web Vulnerabilities	3.2	Remote	4232	Vulnerability-Lab
D	2017-02-21		Lock Photos Album&Videos Safe v4.3 - Directory Traversal	7.8	Remote	3902	Vulnerability-Lab
D	2017-02-20		Album Lock v4.0 iOS - Directory Traversal Vulnerability	7.2	Remote	3448	Vulnerability-Lab
D	2017-01-10		Cobi Tools v1.0.8 iOS - Persistent Web Vulnerability	3.5	Local	4692	Vulnerability-Lab
D	2016-08-01		Zoll ePCR v2.6.4 iOS - Multiple Persistent Vulnerabilities	3.5	Local	6897	Vulnerability-Lab
D	2016-07-27		Zoll Checklist v1.2.2 iOS - Multiple Persistent Vulnerabilities	3.6	Remote	6697	Vulnerability-Lab
D	2016-05-25		Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability	3.4	Local	9678	Vulnerability-Lab
D	2016-05-02		WK UDID v1.0.1 iOS - Command Inject Vulnerability	5.6	Local	23844	Vulnerability-Lab
D	2016-04-25		Notes v4.5 iOS - Arbitrary File Upload Vulnerability	6	Remote	11441	Vulnerability-Lab
D	2016-04-14		C & C++ for OS - Filter Bypass & Persistent Vulnerability	3.5	Remote	10816	Vulnerability-Lab
D	2016-04-05		Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability	3.5	Remote	11462	Vulnerability-Lab

Note: The mobile vulnerabilities section impact vulnerabilities in operating systems, applications, software & hardware.

[ Website Vulnerabilities ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-06-12		123ContactForm - Cross Site Scripting Web Vulnerability	3.3	Remote	1226	ZwX
D	2017-05-23		Lufthansa AG - (Limbo) Open Redirect Web Vulnerability	2.8	Remote	2243	Benjamin K.M.
D	2017-05-03		Stanford University (MBC) - SQL Injection Web Vulnerability	7.1	Remote	2710	Ahsan Tahir
D	2017-01-19		FullContact BB #2 - CSV Excel Macro Injection Vulnerability	3.7	Remote	5435	S.AbenMassaoud
D	2016-12-14		Microsoft (MEPN EDU) - Client Side Cross Site Vulnerability	3	Remote	4443	MOHDAQEELAHMED
D	2016-08-30		Kaspersky Company Account - FileManager Vulnerability	3.5	Remote	6727	Lawrence Amer
D	2016-08-29		Kaspersky Company Account - Response XSS Vulnerability	3.5	Remote	6545	Lawrence Amer
D	2016-07-07		BMW ConnectedDrive - (Update) VIN Session Vulnerability	6	Remote	28028	Benjamin K.M.
D	2016-07-06		BMW - (Token) Client Side Cross Site Scripting Vulnerability	3.6	Remote	22900	Benjamin K.M.
D	2016-05-25		AVAST (Shop) #18 - Multiple Client Side XSS Vulnerabilities	3.3	Remote	19694	Karim Rahal
D	2016-05-24		AVAST (Business) #17 - Persistent Web Vulnerability	3.7	Remote	19361	Karim Rahal
D	2016-05-23		AVAST Business #14 - Client Side Cross Site Vulnerability	3.3	Remote	19774	Kieran Claessens

Note: The website vulnerabilities section impact vulnerabilities in website services and well-known service applications.

[ IT-Security Documents ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2016-09-26		FaceDancer 21 - New Universal Case for PenTests	5.5	Tutorial	4450	Vulnerability-Lab
D	2016-09-24		Sparkasse (Bank) - Service Security Advisory WB021 2016	5.6	Remote	4779	Vulnerability-Lab
D	2015-11-17		Mobile Application Security - Main Issues & Vulnerabilities	3.3	Report	19994	Vulnerability-Lab
D	2015-08-09		Bettercap - New MITM Framework	3.5	Tutorial	22811	Rajivarnan R.
D	2015-01-30		Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure	6.8	Report	27345	Rajivarnan R.
D	2014-07-29		Wickr Announcement - Bug Bounty Program 2014	R	Report	28538	Wickr Security
D	2014-05-12		Vulnerable Workers in Uncertain Times - 4th Conference CFP	R	Report	32427	ADAPT IT
D	2014-04-09		HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu	R	Report	30528	Vulnerability-Lab
D	2014-03-26		ES746 Support-Bulletin - EMS Vulnerability Resolved	3.5	Bulletins	29804	Vulnerability-Lab
D	2014-03-13		RFP - External Network Vulnerability Assessment & PenTest	R	Report	30037	Ismail Kaleem
D	2014-01-31		HackInTheBox Quartal Magazine - eZine Issue 10	R	Magazin	29982	HITB TEAM
D	2013-05-28		Filter Evasion and Bypass Methods - Pentest Magazine	R	Report	35577	Vulnerability-Lab

Note: The documents section impact security reports, security analysis, vulnerability analysis or research reportages.

[ IT-Security Videos ]

D	Date	R	Advisory Name	VS	Type	Views	Author
D	2017-06-26		Microsoft Skype - v7.x Stack Buffer Overflow Vulnerability	7.2	Local	361	Vulnerability-Lab
D	2017-05-31		Apple iOS 10.3 - MobileData Access Permission Vulnerability	3.8	Local	2247	Vulnerability-Lab
D	2017-05-03		Zomato Bug Bounty - Account Take Over Vulnerability	5.3	Remote	2750	N/A - Anonymous
D	2017-04-27		Apple iOS 10.3 - Control Panel Denial of Service Vulnerability	3.3	Local	4281	Vulnerability-Lab
D	2017-03-29		Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities	5.2	Local	4290	S.AbenMassaoud
D	2017-02-28		Bitdefender - Cross Site Request Forgery Vulnerability	3.2	Remote	4715	Vulnerability-Lab
D	2016-12-01		Apple iOS v10.1.1 - Access Permission via Buffer Overflow	6	Local	23546	Vulnerability-Lab
D	2016-11-18		CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate	6.2	Local	4688	Marco Onorati
D	2016-10-17		Trend Micro DirectPass - Bypass & Persistent Vulnerability	4.5	Remote	4354	Lawrence Amer
D	2016-10-16		Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability	3	Remote	4288	Lawrence Amer
D	2016-10-15		404TinyShell connect over Protocol Instance	2.5	Remote	4000	Lawrence Amer
D	2016-10-13		Kaspersky - File Manager Cross Site Scripting Vulnerability	3.5	Remote	4710	Vulnerability-Lab

Note: The security video section demonstrates live hacks, proof of concepts, reproduce videos & exploitation videos.