WordPress The Events Calendar Plugin <= 4.1.1 - Open Redirection

This plugin is prone to an open redirection vulnerability in the "tribe-bar-view" parameter. Solution Update the plugin...

WordPress The Events Calendar Plugin <= 4.1.1 - Open Redirection

This plugin is prone to an open redirection vulnerability in the "tribe-bar-view" parameter. Solution Update the plugin...

WordPress Community Events Plugin 1.3.5 - SQL Injection Vulnerability

No description provided by source...

The vulnerability of the iOS operating system allows attackers to bypass event handlers and modify events of arbitrary applications.

The vulnerability of the XPC Services software interface in the LaunchServices component of the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass event handler restrictions and modify events of arbitrary application...

Big Days - Events Countdown - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Big Days - Events Countdown published at the 'play' market has multiple vulnerabilities...

Apple iOS LaunchServices XPC Services API Security Restriction Bypass Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. In Apple iOS versions prior to 9.3, a security restriction bypass vulnerability exists in the XPC Services API in LaunchServices, which allows a remote attacker ...

Moodle 'get_calendar_events' function design flaws

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in the 'getcalendarevents' function in Moodle version...

optum.com XSS vulnerability

Vulnerable URL: https://www.optum.com/news-events/events.html?type=events...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2931-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2931-1 advisory. Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local...

USN-2930-1: Linux kernel vulnerabilities

Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...

optum.com XSS vulnerability

Vulnerable URL: https://www.optum.com/news-events/events.html?type=events=...

Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities

Document Title: =============== Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1779 View Video: https://www.youtube.com/watch?v=-XLlpnjZXFM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1778...

Ubuntu: Security Advisory (USN-2908-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2016-2543

The sndseqioctlremoveevents function in sound/core/seq/seqclientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FIFO clearing, which allows local users to cause a denial of service NULL pointer dereference and OOPS via a crafted ioctl call...

USN-2908-1: Linux kernel vulnerabilities

halfdog discovered that OverlayFS, when mounting on top of a FUSE mount, incorrectly propagated file attributes, including setuid. A local unprivileged attacker could use this to gain privileges. CVE-2016-1576 halfdog discovered that OverlayFS in the Linux kernel incorrectly propagated security...

USN-2908-3: Linux kernel (Raspberry Pi 2) vulnerabilities

halfdog discovered that OverlayFS, when mounting on top of a FUSE mount, incorrectly propagated file attributes, including setuid. A local unprivileged attacker could use this to gain privileges. CVE-2016-1576 halfdog discovered that OverlayFS in the Linux kernel incorrectly propagated security...

Kaspersky Lab Events - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kaspersky Lab Events published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : seamonkey (openSUSE-2016-126) (SLOTH)

SeaMonkey was updated to 2.40 boo959277 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature - CVE-2015-7201/CVE-2015-7202: Miscellaneous memory safety hazards - CVE-2015-7204: Cra...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of...

Missing delay following user click events in protocol handler dialog — Mozilla

Security researcher window reported an issue where the protocol handler dialog appears, double click events are treated as two single click events. This was caused by the lack of a delay following the initial focus in the file download dialog. This could cause a second dialog to be sent the secon...