CVE-2015-1266

content/browser/webui/contentwebuicontrollerfactory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as...

Drupal Acquia Cloud Site Factory Connector Module Open Redirect Vulnerability

Drupal is a free and open source content management system developed in PHP. An open redirection vulnerability exists in the Drupal Acquia Cloud Site Factory Connector module, which allows an attacker to construct a malicious URI, trick users into parsing it, and redirect users to an arbitrary WE...

Acquia Cloud Site Factory Connector - Less Critical - Open Redirect - SA-CONTRIB-2015-125

Acquia Cloud Site Factory provides an environment and a robust set of tools that simplify management of many Drupal sites, allowing you to quickly deliver and manage any number of websites. The module ships with a modified version of the core Overlay JavaScript file, which is vulnerable to an ope...

Schneider Electric OPC Factory Server DLL Load Arbitrary Code Execution Vulnerability

Schneider Electric OPC Factory Server OFS is a set of data communication editing software. The software supports access to important information, open page design, transparent architecture and interoperability to enable good processes and communication. A security vulnerability exists in the...

Android phone to restore the factory settings, the data can still be recovery-vulnerability warning-the black bar safety net

If you are planning to sell your old Android phone, we recommend that you still give more consideration to consider...... Android Restore factory settings function has a vulnerability, even if you restore the factory settings, hackers can still recover your login password, SMS, e-mail and picture...

Android Factory Reset Improper Sanitization Exposes Data

The churn of Android devices, whether older smartphones being traded in or sold online, makes device sanitization imperative. The native feature in the OS, however, may not be doing as thorough a job as advertised. A paper, “Security Analysis of Android Factory Resets” pdf, published by Ross...

Flawed Android Factory Reset Failed to Clear Private Data from Smartphones

If you’re planning to sell your old Android smartphone then you need to think again because there is a weakness in the Android Factory Reset option that could be exploited to recover your login credentials, text messages, emails and pictures even if you have wiped its memory clean. Computer...

Local denial of service vulnerability in nubia z7 phones

An unprotected broadcast receiver exists in the built-in application cn.nubia.factory on the ZTE nubia z7 series cell phone system cn.nubia.factory.service.FactoryResetReciver, a local malicious does not require any Android privileges to send malicious broadcasts to this broadcast receiver, which...

Schneider Electric OPC Factory Server (OFS) < 3.5 SP1 ActiveX Object Multiple Buffer Overflows DoS

Binary data scadaopcfactoryserveractivex.nbin...

Shortcode Factory < 1.1.1 - XSS

The Shortcode Factory WordPress plugin was affected by a XSS security vulnerability...

Nishishi Factory Fumy Teacher's Schedule Board Cross-Site Scripting Vulnerability

Nishishi Factory Fumy Teacher's Schedule Board is a forum program. A cross-site scripting vulnerability in Nishishi Factory Fumy Teacher's Schedule Board schedule.cgi allows remote attackers to inject malicious script or HTML code that, when viewed with malicious data, can obtain sensitive...

CVE-2015-0900

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-0900

CVE-2015-0900 corresponds to a cross-site scripting vulnerability in Nishishi Factory Fumy Teacher's Schedule Board. The affected component is the schedule.cgi CGI program (versions 1.10 through 2.21). The root cause is a browser-executable script injection via a crafted URL, enabling arbitrary s...

CVE-2015-0900

Cross-site scripting XSS vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

ZTE ZXV10-H201L Multiple Vulnerabilities

Exploit for hardware platform in category web applications /-------------------------------------------------/ /Exploits found by TheWalk1ngShad0w / /My email: email protected / /-------------------------------------------------/ Exploit tested & working on modem with this build info:...

PicketLink: XXE via insecure DocumentBuilderFactory usage

It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the...

Schneider Electric OFS Server Vulnerability (Update A)

OVERVIEW --------- Begin Update A Part 1 of 4 -------- This updated advisory is a follow-up to the original advisory titled ICSA-15-141-01 Schneider Electric OFS Server Vulnerability that was published May 21, 2015, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified tw...

SolarWinds Server and Application Monitor Buffer Overflow Vulnerability (CNVD-2015-01241)

SolarWinds Server and Application Monitor is a server and application monitor from SolarWinds USA. The monitor provides monitoring, alerts, reports and more for server hardware and applications. A security vulnerability in the SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl...

PicketLink: XXE via insecure DocumentBuilderFactory usage

It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the...