Directory traversal

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

CVE-2018-9118

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

CVE-2018-9118

CVE-2018-9118 – WordPress WP Background Takeover Advertisements (plugin) . Affected: WordPress site using the 99 Robots WP Background Takeover Advertisements plugin (versions up to 4.1.4, prior to 4.1.5). Vulnerability: Local File Inclusion/Directory Traversal via exports/download.php where a fil...

openSUSE Security Update : php5 (openSUSE-2018-99)

This update for php5 fixes several issues. These security issues were fixed : - CVE-2018-5712: Prevent reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file that allowed for information disclosure bsc1076220 - CVE-2018-5711: Prevent integer signedness error that could...

Debian Security Advisory DSA 3824-1 (firebird2.5 - security update)

George Noseevich discovered that firebird2.5, a relational database system, did not properly check User-Defined Functions UDF, thus allowing remote authenticated users to execute arbitrary code on the firebird server. OpenVAS Vulnerability Test $Id: deb3824.nasl 6607 2017-07-07 12:04:25Z cfischer...

Pan micro E-office /general/new_mytable/content_list/content_-99.php parameters block_id injection vulnerability

No description provided by source...

99 Puzzles - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application 99 Puzzles published at the 'play' market has multiple vulnerabilities...

adobe.com XSS vulnerability

Vulnerable URL: http://www.adobe.com/arvatoredirect.html?tduid=a96354530b7ae665ae78a948957c57cf=javascript:alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| Yes, at 16.02.2016 Latest check for patch:| 16.02.2016 15:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

sogou.com XSS vulnerability

Vulnerable URL: https://www.sogou.com/sogou?pid=AQxRG"=" Details: Description| Value ---|--- Patched:| Yes, at 15.10.2016 Latest check for patch:| 15.10.2016 21:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99 Google Pagerank| 8 VIP website status:| Yes Che...

Microsoft Office Memory Corruption (MS15-99: CVE-2015-2521)

A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted fi...

Amazon Linux: Security Advisory (ALAS-2012-99)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-99-1 : flac security update

Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker could execute arbitrary code. CVE-2014-8962 heap-based buffer overflow in...

CVE-2014-5756

The Buy 99 Cents Only Products aka com.ww99CentsOnlyStores application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5756

The CVE-2014-5756 entry concerns the Android app “Buy 99 Cents Only Products” (com.ww99CentsOnlyStores) version 0.1, which does not validate X.509 certificates when connecting to SSL servers. This creates a susceptibility to man-in-the-middle attacks where a crafted certificate can spoof servers ...

Oracle Hyperion Strategic Finance 12.x Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow

No description provided by source. !-- Oracle Hyperion Strategic Finance Client 12.x Tidestone Formula One WorkBook OLE Control TTF16 6.3.5 Build 1 SetDevNames Remote Heap Overflow poc 99% stable,IE-no-dep. I think this control can be carried by other products, however 6.1 seems not vulnerable A...

Auktionshaus 4 - news.php SQL Injection Vulnerability

No description provided by source. Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1644-1)

update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...

Solaris 10 (x86) : 147694-99 (deprecated)

JavaSE 7x86: update 99 patch equivalent. Date this patch was last updated by Sun : Mar/23/16 This plugin has been deprecated and either replaced with individual 147694 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (x86) : 147695-99 (deprecated)

JavaSE 7x86: update 99 patch equivalent. Date this patch was last updated by Sun : Mar/23/16 This plugin has been deprecated and either replaced with individual 147695 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (sparc) : 147693-99 (deprecated)

JavaSE 7: update 99 patch equivalent to J. Date this patch was last updated by Sun : Mar/23/16 This plugin has been deprecated and either replaced with individual 147693 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...