CVE-2016-4728

CVE-2016-4728 affects WebKit in Apple iOS (pre-10), tvOS (pre-10), iTunes for Windows (pre-12.5.1) and Safari (pre-10). Root cause: mishandling of error prototypes, enabling remote attackers to execute arbitrary code via a crafted webpage. Public fixes exist: iOS/tvOS Safari patches in subsequent...

CVE-2016-4728

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2016-4728

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2015-4728

Technical details for CVE-2015-4728 are not publicly available in the provided documents. Monitor closely for updated information and disclosures.

TP-LINK WDR4300 - Stored XSS & DoS

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...

CVE-2014-4728

The CVE-2014-4728 entry concerns the TP-LINK TL-WDR4300 N750 router. Affected component: the device web server. Root cause: handling of a long header in a GET request, enabling remote attackers to cause a denial of service (crash). Impact stated in sources: partial availability impact to the devi...

TP-LINK WDR4300 XSS / Denial Of Service

Advisory Information =============== Vendors Contacted: TP-LINK Vendor Patched: Yes, Firmware 140916 System Affected: N750 Wireless Dual Band Gigabit Router TL-WDR4300, might affect others. Versions Affected: 130617 , possibly earlier CVE Numbers Assigned: CVE-2014-4727, CVE-2014-4728...

CVE-2013-4728

CVE-2013-4728 affects DDSN Interactive cm3 Acora CMS versions such as 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). The vulnerability allows remote attackers to obtain sensitive information via a crafted .. (dot dot) in the l parameter, which reveals the installation path in a...

CVE-2013-4728

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a .. dot dot in the "l" parameter, which reveals the installation path in an error message...

CVE-2012-4728

The CVE-2012-4728 entry is supported by connected sources: Corel Quattro Pro X6 Standard Edition (16.0.0.388 and earlier) is affected by two NULL pointer dereferences in QPW160.dll (QProGetNotebookWindowHandle and Ordinal132) triggered by a crafted QPW file, causing remote denial of service via a...

Corel Quattro Pro X6 Standard Edition NULL Pointer Dereference

Advisory ID: HTB23112 Product: Corel Quattro Pro X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: August 27, 2012 Public Disclosure: March 7, 2013 Vulnerabili...

CVE-2011-4728

The CVE-2011-4728 entry concerns Parallels Plesk Panel 10.2.0_build1011110331.18, where the Server Administration Panel does not set the secure flag on a cookie during HTTPS sessions. This allows an attacker to capture the cookie by probing or intercepting traffic in an HTTP context, as demonstra...

Zikula Security bypass Vulnerability

This host is running Zikula and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbzikulasecbypassvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Zikula Security bypass Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...

CVE-2010-4728

The CVE affects Zikula

CVE-2009-4728

CVE-2009-4728 affects the administrative interface of the application “Questions Answered 1.3.” The vulnerability is a SQL injection via the username parameter that could allow an attacker to execute arbitrary SQL commands on the database. Documents do not specify exact vulnerable versions beyond...

CVE-2009-4728

creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9341...

DSquare Exploit Pack: D2SEC_HBDW

Name| d2sechbdw ---|--- CVE| CVE-2008-4728 Exploit Pack| D2ExploitPack Description| Hummingbird Deployment Wizard ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2008-4728

Affected software: Hummingbird Deployment Wizard 2008 (version 10.0.0.44) with DeployRun.DeploymentSetup.1 ActiveX control. Vulnerabilities allow remote arbitrary-program execution via DeployRun.dll methods Run and PerformUpdateAsync, and arbitrary registry modification via SetRegistryValueAsStri...

Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities

This host is installed with Deployment Wizard ActiveX Control and is prone to multiple security vulnerabilities. The multiple flaws are due to error in 'SetRegistryValueAsString', 'Run' and 'PerformUpdateAsync' methods in DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control. OpenVAS...

CVE-2008-4728

creationtimestamp| type| source ---|---|--- 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6773 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6776 2008-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6774...