Hindu Matrimonial Script - Authentication Bypass

Hindu Matrimonial Script - Authentication Bypass Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-script/...

texaslandmen.com XSS vulnerability

Vulnerable URL: http://www.texaslandmen.com/propertyresults.php?area=HillCountry=Texas=acreage=DESC'"--!...

openSUSE Security Update : tor (openSUSE-2016-1526)

This update for tor updates to version 0.2.8.12 and fixes the following issues : - a hostile hidden service could cause tor clients to crash boo1016343, CVE-2016-1254 - updated fallback directory list - updated geoip and geoip6 to the December 7 2016 Maxmind GeoLite2 Country database. - When Tor...

Man In The Middle (MitM)

geoip-lite-country is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads a CSV resource via HTTP, allowing MitM attacks...

Cross-site scripting vulnerability in wordpress plugin caret-country-access-limit

caret-country-access-limit is a Wordpress plugin for descriptive country access limitation The Wordpress plugin caret-country-access-limit is vulnerable to an xss vulnerability due to improper filtering of user input, which allows attackers to frame malicious web pages and trick users into parsin...

Mindoktor: Vulnerable Mobile Phone configuration

Information I've found that when you register in "https://clinic.mindoktor.se/user/register", there is a specific field that says: "Mobile Phone - is needed to receive one-time codes via SMS". According to the description: You need your mobile phone every time you log in, so for every login an sm...

Threat Outbreak Alert RuleID24353: Email Messages Distributing Malicious Software on August 18, 2016

Medium Alert ID: 48517 First Published: 2016 August 18 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24353 may contain the following files: Name |...

indiancountrytodaymedianetwork.com XSS vulnerability

Vulnerable URL: http://indiancountrytodaymedianetwork.com/2016/04/13/why-poor-vote-theyre-billionaires%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3B%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:55 GMT Vulnerability type:| XSS...

indiancountrytodaymedianetwork.com XSS vulnerability

Vulnerable URL: http://indiancountrytodaymedianetwork.com/2016/04/13/why-poor-vote-theyre-billionaires%27%3E%20%3C/form%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3B%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:54 GMT...

Admin panel UliCMS SQL Injection Vulnerability

UliCMS is a web content management solution. A SQL code injection exists due to the "countryblacklist" variable of the page "action=spamfilter". An attacker can exploit the vulnerability to execute database code...

Guess the Country! - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess the Country! published at the 'play' market has multiple vulnerabilities...

My Country - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application My Country published at the 'play' market has multiple vulnerabilities...

2020: My Country - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application 2020: My Country published at the 'play' market has multiple vulnerabilities...

Country Friends - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Country Friends published at the 'play' market has multiple vulnerabilities...

Country Life: Harvest Day - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Country Life: Harvest Day published at the 'play' market has multiple vulnerabilities...

Typosquatters Target Mac Users With New .OM Domain Scam

Typosquatters are targeting Apple computer users with malware in a recent campaign that snares clumsy web surfers who mistakenly type .om instead of .com when surfing the web. According to Endgame security researchers, the top level domain for Middle Eastern country Oman .om is being exploited by...

用友人力资源管理 country 和 language 字段任意文件下载漏洞

No description provided by source...

WordPress iQ Block Country Plugin <= 1.1.19 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "ipaddress". Solution Update this plugin...

iQ Block Country <= 1.1.19 - Authenticated Reflected Cross-Site Scripting (XSS)

The iQ Block Country WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress iQ Block Country Plugin <= 1.1.19 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "ipaddress". Solution Update this plugin...