CVE-2014-9310

Cross-site scripting XSS vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress...

CVE-2014-9310

Cross-site scripting XSS vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress...

CVE-2014-9310

CVE-2014-9310 is a XSS vulnerability in the WordPress Backup to Dropbox plugin for WordPress, exposed in versions before 4.1. The issue is categorized as a reflected XSS (per WPVulnDB) where unsanitized/reflected user input can be returned in responses. Impact: user sessions/credentials could be ...

CVE-2014-9310

Cross-site scripting XSS vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress...

CVE-2014-9310: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress...

PT-2017-6350

Name of the Vulnerable Software and Affected Versions WordPress Backup to Dropbox plugin versions prior to 4.1 Description The issue is related to a cross-site scripting XSS vulnerability. Recommendations For WordPress Backup to Dropbox plugin versions prior to 4.1, update to version 4.1 or later...

For many well-known companies impact of Oracle Responsys local file inclusion vulnerability-vulnerability warning-the black bar safety net

Today I want to show you is, how do I find the Oracle Responsys cloud service system in a local file inclusion vulnerabilities LFI Airport. Due to the current commercial sales, network storage and social relationships companies are using the Oracle Responsys cloud solution, so that the...

LinkedIn Hacker, Wanted by US & Russian, Can be Extradited to Either State

The alleged Russian hacker, who was arrested by the Czech police in Prague last October on suspicion of massive 2012 data breach at LinkedIn, can be extradited to either the United States or Russia, a Czech court ruled on Tuesday. Yevgeniy Aleksandrovich Nikulin, a 29-years-old Russian national, ...

Dropbox Lepton Denial of Service Vulnerability (CNVD-2017-08238)

Dropbox Lepton is a set of tools for lossless compression of JPEG format files. A denial of service vulnerability exists in Dropbox Lepton version 1.2.1, which can be exploited by an attacker to perform a DoS SEGV and application crash via an incorrectly formatted lepton file...

CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

UBUNTU-CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

Code injection

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2017-8891

Technical details (affected product versions, root cause specifics, exploits) are not publicly disclosed in the provided documents; monitor for updates.

CVE-2017-8891: DEPRECATED: Use of Uninitialized Resource

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

PT-2017-18602

Name of the Vulnerable Software and Affected Versions Dropbox Lepton version 1.2.1 Description The issue allows for a denial of service DoS through a malformed lepton file, causing a segmentation fault SEGV and application crash. This occurs because the code fails to ensure the correct setup of a...

Dropbox: SSL Key Certificate expires

The report points out that the certificate for https://www.dropboxpartners.com had expired. We closed the issue as informative because we were already working on shutting down the site. The site became unavailable within a few days of the report being filed...