1887 matches found
MS16-088: Description of the security update for SharePoint Server 2016: July 12, 2016
None None...
The wave of government approval platform ECGAP /ViewSource/SrcWorkProgram. aspx file infoflowId parameter SQL injection vulnerability
No description provided by source...
BMW ConnectedDrive - (Update) VIN Session Vulnerability
Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1736 Vulnerability Magazine:...
The wave of government approval platform ECGAP /Broadcast/broadcastview. aspx file InfoId parameter SQL injection vulnerability
No description provided by source...
The wave of government approval platform ECGAP /channel/QueryHig. aspx file AppBusinessName parameter SQL injection vulnerability
No description provided by source...
UBUNTU-CVE-2016-2831
Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service UI outage, or conduct clickjacking or spoofing attacks, via a crafted web site...
ProcessMaker 3.0.1.7 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: ProcessMaker v3.0.1.7 Multiple vulnerabilities Date: 31/05/2016 Author: Mickael Dorigny @ information-security.fr Vendor or Software Link: http://www.processmaker.com/ Version: 3.0.1.7 Category: Multiple Vulnerabilities...
icedtea-web: applet origin spoofing
It was discovered that IcedTea-Web did not properly determine an applet's origin when asking the user if the applet should be run. A malicious page could use this flaw to cause IcedTea-Web to execute the applet without user approval, or confuse the user into approving applet execution based on an...
icedtea-web: unexpected permanent authorization of unsigned applets
It was discovered that IcedTea-Web did not properly sanitize applet URLs when storing applet trust settings. A malicious web page could use this flaw to inject trust-settings configuration, and cause applets to be executed without user approval...
Privacy Activists Cheer Passage of Email Privacy Act, Brace for Senate Battle
In a vote of 419-0 on Wednesday, the U.S. House of Representatives passed the Email Privacy Act that would require the government to obtain a warrant in order to access digital communications stored in the cloud. Privacy advocates cheered the victory and said it was a win for U.S. citizens and...
PayPal #123 - Security Key Pin Approval & Expire Bypass
Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...
PayPal #123 - Security Key Pin Approval & Expire Bypass
Document Title: =============== PayPal 123 - Security Key Pin Approval & Expire Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1697 Video: https://www.youtube.com/watch?v=5O0b88KhJU Release Date: ============= 2016-02-01 Vulnerability Laboratory ID VL-ID:...
SQL Injection Vulnerability in 'txtContent' Parameter of Administrative Approval System of Wave Group
It is a cloud computing infrastructure platform of Shandong Wave Qilu Software Industry Co. A SQL injection vulnerability exists in the parameters of the administrative approval system of Wave Group. The lack of filtering of the 'txtContent' parameter allows an attacker to exploit the vulnerabili...
联邦政府网上审批系统 WebUserList.aspx 页面 id 参数 SQL 注入
No description provided by source...
联邦政府网上审批系统 spsl.aspx 页面 xksxid 参数 SQL 注入
No description provided by source...
联邦政府网上审批系统 sxlist.aspx 页面 baseorg 参数 SQL 注入
No description provided by source...
联邦政府网上审批系统 listBcmx2.aspx 页面 org 参数 SQL 注入
No description provided by source...
联邦政府网上审批系统 ckmxlist.aspx 页面 tbSxmc 参数 SQL 注入
No description provided by source...
Ubuntu: Security Advisory (USN-2817-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : IcedTea Web vulnerabilities (USN-2817-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2817-1 advisory. It was discovered that IcedTea Web incorrectly handled applet URLs. A remote attacker could possibly use this issue to inject applets into the...