9704 matches found
Google Analytics by Yoast <= 5.3.2 - Cross-Site Scripting (XSS)
The Google Analytics Dashboard Plugin for WordPress by MonsterInsights WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Google Analytics Plugin <= 5.3.2 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
New Analytics Tool Defines Language Used Malicious Domains
OpenDNS has gone public with a new tool that uses a blend of analytics principles found outside information security to create a threat model for detecting domains used in criminal and state-sponsored hacking campaigns. NLPRank is not ready for production, said OpenDNS director of security resear...
Popular Wordpress Analytics plugins-WP-Slimstat weak key and the sql injection vulnerability analysis-vulnerability warning-the black bar safety net
! /Article/UploadPic/2015-2/2 0 1 5 2 2 6 1 1 4 2 5 0 6 4 5. png Web Security enterprise Sucuri Tuesday in a blog post said that they in the latest version of Wordpress Analytics plugins-WP-Slimstat found in asql injectionvulnerabilities, exploit the vulnerability, an attacker can perform sql bli...
WP Slimstat <= 3.9.5 - Weak Cryptographic Keys Leading to SQL Injections
The Slimstat Analytics WordPress plugin was affected by a Weak Cryptographic Keys Leading to SQL Injections security vulnerability...
Pentaho 4.5.0 - User Console XML Injection
Pentaho 4.5.0 - User Console XML Injection ======================================================================== title: Pentaho User Console XML Injection Vulnerability program: Pentaho BI User Console vulnerable version: Pentaho was injected into the XML of the client's POST request. This tag...
Pentaho < 4.5.0 - User Console XML Injection
======================================================================== title: Pentaho User Console XML Injection Vulnerability program: Pentaho BI User Console vulnerable version: Pentaho was injected into the XML of the client's POST request. This tag defines an external entity, xxe8295c, whic...
Army Research Lab Releases Dshell Forensics Framework
The U.S. Army has released to open source an internal forensics analysis framework that the Army Research Lab has been using for some time. The framework, known as Dshell, is a Python tool that runs on Linux and its designed to help analysts investigate compromises within their environments. The...
ManageEngine Firewall Analyzer 8.0 - Directory Traversal Cross-Site Scripting
ManageEngine Firewall Analyzer 8.0 - Directory Traversal Cross-Site Scripting ...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit...
ManageEngine Firewall Analyzer 8.0 - Directory Traversal/XSS Vulnerabilities
Exploit for hardware platform in category web applications ...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit Author: AmirHadi...
ManageEngine Firewall Analyzer 8.0 - Directory Traversal / Cross-Site Scripting
...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit Author: AmirHadi Yazdani Sobhansys Co Vendor Homepage:...
CVE-2014-8917
Multiple cross-site scripting XSS vulnerabilities in 1 dojox/form/resources/uploader.swf aka upload.swf, 2 dojox/form/resources/fileuploader.swf aka fileupload.swf, 3 dojox/av/resources/audio.swf, and 4 dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1....
CVE-2014-8917: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in 1 dojox/form/resources/uploader.swf aka upload.swf, 2 dojox/form/resources/fileuploader.swf aka fileupload.swf, 3 dojox/av/resources/audio.swf, and 4 dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media Analytics 1....
Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition
Oracle Business Intelligence Enterprise Edition is a business intelligence suite enterprise edition. A security vulnerability exists in Oracle Business Intelligence Enterprise Edition Analytics Web General, which could be exploited by remote attackers to compromise system confidentiality...
IBM API Management Information Disclosure Vulnerability (CNVD-2015-00567)
IBM API Management is IBM's complete solution to help organizations securely create, manage and connect application program interfaces APIs to extend their products and services to a variety of mobile channels. An information disclosure vulnerability exists in IF1, version 3.0 prior to IBM API...
CVE-2015-0399
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General...
CVE-2015-0399
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General...
CVE-2015-0399
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General...