PT-2019-14619

Name of the Vulnerable Software and Affected Versions NIUSHOP version 1.11 Description The issue is related to a security problem where an attacker can inject malicious code. The problem occurs via the "index.php?s=/admin" API endpoint. Recommendations For NIUSHOP version 1.11, update to a versio...

CVE-2019-16257

CVE-2019-16257 relates to SIMalliance Toolbox Browser (S@T Browser) on the UICC in some Motorola devices. The issue allows remote attackers to retrieve location and IMEI information, or other data and commands, via SIM Toolkit (STK) instructions in an SMS message (Simjacker). The Red Hat/NVD/NIST...

New SIM Card Flaw Lets Hackers Hijack Any Phone Just By Sending SMS

Cybersecurity researchers today revealed the existence of a new and previously undetected critical vulnerability in SIM cards that could allow remote attackers to compromise targeted mobile phones and spy on victims just by sending an SMS. Dubbed "SimJacker," the vulnerability resides in a...

PT-2019-14603

Name of the Vulnerable Software and Affected Versions Motorola devices affected versions not specified Description The issue allows remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message...

CVE-2019-16257: Undefined Security Weakness

Some Motorola devices include the SIMalliance Toolbox Browser aka S@T Browser on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message, aka Simjacker...

CVE-2019-16256: Undefined Security Weakness

Some Samsung devices include the SIMalliance Toolbox Browser aka S@T Browser on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit STK instructions in an SMS message, aka Simjacker...

Security vulnerabilities fixed in - Thunderbird 68.1 — Mozilla

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. Some...

CVE-2017-18599

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

CVE-2017-18599

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

s-win.or.kr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-964423 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting s-win.or.kr website and its...

s-proceed.co.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-964422 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting s-proceed.co.jp website and i...

S-CMS e-commerce system aj***.php page M_fen parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Mfen parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

PT-2019-8530

Name of the Vulnerable Software and Affected Versions Pinfinity theme versions prior to 2.0 Description The issue concerns a cross-site scripting XSS flaw. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthoriz...

CVE-2017-18599: Improper Neutralization of Input During Web Page Generation

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

SQL injection vulnerability in the C***_fi*** parameter of aj***.php page in the background of S-CMS government website system.

S-CMS is a content management system CMS based on PHP and MySQL. There is a SQL injection vulnerability in the Cfi parameter of the aj.php page in the background of the S-CMS government website building system, which can be exploited by an attacker to obtain sensitive information from the databas...

Fedora Update for dovecot FEDORA-2019-59d60bd1fa

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

S-CMS hospital website building system background a***.php G_sh parameter has SQL injection vulnerability

S-CMS hospital station building system is developed by php+mysql, easy to operate, convenient, support PC+Mobile+WeChat. S-CMS hospital building system background a.php Gsh parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

S-CMS hospital website building system backend a***.php suffers from SQL injection vulnerability

S-CMS hospital station building system is developed by php+mysql, easy to operate, convenient, support PC+Mobile+WeChat. S-CMS hospital building system background a.php SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

Security vulnerabilities fixed in - Thunderbird 60.9 — Mozilla

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. Some...