3219 matches found
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The Linux-image-2.6.26-2-r5k-ip32 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may result in a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The Linux-image-2.6.18-6-sparc64-smp package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may result in a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-2-xen-amd64 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities of the linux-headers-2.6.26-2-all-powerpc package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users
An authentication vulnerability was found in openstack-ironic. A client with network access to the ironic-api service could bypass OpenStack Identity authentication, and retrieve all information about any node registered with OpenStack Bare Metal. If an unprivileged attacker knew or was able to...
SUSE-SU-2016:2217-1 Security update for kinit
kinit was updated to fix one security issue. This security issue was fixed: - CVE-2016-3100: World readable Xauthority file exposed cookie credentials boo983926...
Nextcloud: nextcloud.com: Directory listening for 'wp-includes' forders
Hello guys, Details: The web server is configured to display the list of files contained in this directory. As a result of a misconfiguration - end user / attacker able to see content of the folders with systemically important files Vulnerable place: /wp-includes directory when I tried to navigat...
Urban Dictionary: Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API Documentation
By sending an extra parameter kind=1 in the upvote/downvote API request, a user can vote as many times as he wants without any IP address restriction: http://api.urbandictionary.com/v0/vote?kind=1&direction=up&defid=94413 Seems harmless enough, but your site does depend on the accuracy of the...
Docker exposure to 2 3 7 5 port, causing security vulnerabilities-vulnerability warning-the black bar safety net
Today there is a small partner found the docker exposed 2 3 7 5 port, causing a security vulnerability. I now introduce to you the whole thing the ins and outs, and tell little friends, and how to fix this vulnerability. In order to implement Cluster Management, Docker provides a remote managemen...
samba: SAMR and LSA man in the middle attacks
A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...
LINE POP - Customized SSL, Dangerous filesystem permissions, Exported components with free access vulnerabilities
HackApp vulnerability scanner discovered that application LINE POP published at the 'play' market has multiple vulnerabilities...
Panzer Sturm - Dangerous filesystem permissions, Exported ContentProvider, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Panzer Sturm published at the 'play' market has multiple vulnerabilities...
Only One - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Only One published at the 'play' market has multiple vulnerabilities...
Airplanes Quartet - External URLs, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Airplanes Quartet published at the 'play' market has multiple vulnerabilities...
Ultimate Notepad - Exported components, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Ultimate Notepad published at the 'play' market has multiple vulnerabilities...
Pattern Lock Screen - Dynamic Code Loading, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Pattern Lock Screen published at the 'play' market has multiple vulnerabilities...
countdown.co.nz XSS vulnerability
Vulnerable URL: http://www.countdown.co.nz/search-results?topsearchquery=move%22%20onmouseover=alert%28%22XSSPOSED%22%29%20%22 Details: Description| Value ---|--- Patched:| Yes, at 23.03.2016 Latest check for patch:| 23.03.2016 23:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
victorschodts.com XSS vulnerability
Vulnerable URL: http://victorschodts.com/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Googl...
smokehouse.com XSS vulnerability
Vulnerable URL: http://www.smokehouse.com/burgers.nsf/search.xsp?searchValue=flawtech%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
salarylist.com XSS vulnerability
Vulnerable URL: http://www.salarylist.com/q/-autofocus-onfocus=-prompt-XSSPOSED--Salary.htm Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 194590 Google...