Singles' Day Blows Away Its Own Records

Singles' Day in China is the world's largest shopping event. Since its beginnings in 1993 at Nanjing University, it has grown to become a national phenomenon. Singles' Day was originally started as a way to celebrate singles and as a protest against couple-centric festivals. The date 11/11 was...

RHEL 7 : qemu-kvm-rhev (RHSA-2016:0084)

Updated qemu-kvm-rhev packages that fix two security issues and three bugs are now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

RHEL 7 : qemu-kvm-rhev (RHSA-2015:1739)

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

'Zip Slip' Vulnerability Affects Thousands of Projects Across Many Ecosystems

Security researchers at British software firm Snyk have revealed details of a critical vulnerability that affects thousands of projects across many ecosystems and can be exploited by attackers to achieve code execution on the target systems. Dubbed "Zip Slip," the issue is an arbitrary file...

alibaba-longphuoc.com XSS vulnerability

Open Bug Bounty ID: OBB-584219 Description| Value ---|--- Affected Website:| alibaba-longphuoc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall Alibaba Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Alibaba Clone Script is an e-commerce system from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Alibaba Clone Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Cross site scripting

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6867

CVE-2018-6867 affects PHP Scripts Mall Alibaba Clone Script 1.0.2. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via the profile parameter, as described in multiple sources and evidenced by PoC/exploit references (e.g., exploit-db, 0day.today, Packet Storm). Public writeups ...

Alibaba Clone Script 1.0.2 Cross Site Scripting

Exploit Title: Alibaba Clone Script 1.0.2 a Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Version...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting

Alibaba Clone Script 1.0.2 - Cross-Site Scripting. CVE-2018-6867. Webapps exploit for PHP platform Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category...

Alibaba Clone Script 1.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Alibaba Clone Script 1.0.2 – Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/alibaba-clone/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

Privacy Clouds Form Over Mantistek Gaming Keyboard

Allegations a keylogger is embedded in the software of a popular gaming keyboard are dogging PC peripheral maker Mantistek. The Chinese manufacturer is facing a blizzard of accusations that its popular GK2 Mechanical Gaming Keyboard has spyware installed and is sending keystroke data back to the...

Built-in Keylogger Found in MantisTek GK2 Keyboards—Sends Data to China

"The right keyboard can make all the difference between a victory and a defeat in a video game battlefield." If you are a gamer, you can relate to the above quote. But what if your winning weapon betrays you? The popular 104-key Mantistek GK2 Mechanical Gaming Keyboard that costs around €49.66 ha...

Arigatou PICOOC AliCloud OSS credentials have information leakage vulnerability

Arigatou PICOOC APP is the companion APP application for Latin, a smart scale that measures body fat. AliCloud Object Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by AliCloud to the outside world. There is an information leakage...

Information leakage vulnerability in Aliyun OSS credentials for Advanced Medical Examination BaoDian

Advanced Medical Exam App is a physician exam material application exam study question bank app. There is an information leakage vulnerability in the Medical Advanced Title Exam BaoDian AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

Lychee Live AliCloud OSS credentials have information leakage vulnerability

Lychee Live app is an Internet-based interactive live broadcasting platform launched by Guangdong Network Radio and Television. There is an information leakage vulnerability in Lychee Live Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

After School Help AliCloud OSS credentials have information leakage vulnerabilities

After School Help App is an application for elementary and middle school students to communicate after school. An information leakage vulnerability exists in the After School Help AliCloud OSS credentials. The vulnerability is caused by credential leakage due to accessKeyId and accessKeySecret,...