kensoft CMS SQL Injection Vulnerability

kensoft CMS is a content management system. A SQL injection vulnerability exists in the ft parameter of the dispatch.php page of kensoft Cms, which can be exploited by attackers to obtain sensitive information...

Concrete5 5.7.3.1 - (Application::dispatch) Local File Inclusion

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Concrete5 installed 329. $response = $this-getEarlyDispatchResponse; 330. 331. if !isset$response 332. $collection = Route::getList; 333. $context = new...

Concrete5 CMS 5.7.3.1 - 'Application::dispatch' Method Local File Inclusion

------------------------------------------------------------------------------- Concrete5 installed 329. $response = $this-getEarlyDispatchResponse; 330. 331. if !isset$response 332. $collection = Route::getList; 333. $context = new \Symfony\Component\Routing\RequestContext; 334...

Concrete5 CMS 5.7.3.1 - Application::dispatch Method Local File Inclusion

Concrete5 CMS 5.7.3.1 - Application::dispatch Method Local File Inclusion ------------------------------------------------------------------------------- Concrete5 installed 329. $response = $this-getEarlyDispatchResponse; 330. 331. if !isset$response 332. $collection = Route::getList; 333...

Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data 9328.prm...

Apple Safari Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Edge Security Mechanism Bypass Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security mechanism bypass vulnerability exists in Microsoft Edge mishandles exceptions during window-message dispatch operations, allowing remote attackers to...

Security feature bypass

Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge ASLR Bypass."...

CVE-2016-0080

Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge ASLR Bypass."...

brainerddispatch.com XSS vulnerability

Vulnerable URL: http://www.brainerddispatch.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:27 GMT Vulnerability type:| XSS Vulnerability...

APPLE-SA-2015-10-21-2 watchOS 2.0.1

APPLE-SA-2015-10-21-2 watchOS 2.0.1 watchOS 2.0.1 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, Apple Watch Edition, and Apple Watch Hermes Impact: Some cards may allow a terminal to retrieve limited recent transaction information when maki...

CVE-2015-6989

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

Memory corruption

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data appleios91check.nbin...

JSF: Information disclosure due to missing access restriction in portlet resource dispatching

It was found that JavaServer Faces PortletBridge-based portlets using GenericPortlet's default resource serving did not restrict access to resources within the web application. An attacker could set the resource ID field of a URL to potentially bypass security constraints and gain access to...

Threat Outbreak Alert RuleID16448: Email Messages Distributing Malicious Software on July 8, 2015

Medium Alert ID: 39674 First Published: 2015 July 7 19:20 GMT Last Updated: 2015 July 9 13:38 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16448KVR may...

Google Chrome Denial of Service Vulnerability (CNVD-2015-01575)

Google Chrome is a popular WEB browser. A denial of service vulnerability exists in the 'MidiManagerUsb::DispatchSendMidiData' function in the Google Chrome media/midi/midimanagerusb.cc file, which can be exploited by remote attackers to renderer to provide access to an invalid port index, crashi...

chromium-browser: Out-of-bounds write in media

Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midimanagerusb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging renderer access to provide an invalid port index...

BullGuard Multiple Products Arbitrary Write Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title - BullGuard Multiple Products Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.bullguard.com/ Tested Version - 14.1.285.4 Driver Version -...