NextGEN Gallery geo <= 1.0 - Unauthenticated PHP Object Injection

The plugin nextgen-gallery-geo insecurely trusts serialized data submitted over AJAX requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. The original researcher notified the WordPress Plugins team. PoC Attack is exploitable over AJAX calls sites with...

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

The plugin my-geo-posts-free insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. PoC Attack is exploitable over HTTP requests to sites with the my-geo-posts-free Plugin. The original researcher...

Best Practices for deploying PVS in multi-geo environments

In scenarios where companies have a Global presence with multiple geographical locations, it is sometimes desirable to have a Provisioning Services Farm that spans multiple locations across the globe. PVS requires a constant andreliable connection to the SQL database. If there's a delay in...

Debian: Security Advisory (DSA-3764-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-9889

Some forms with the parameter geozoomleveltofoundlocation in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and articleimage.php. The impact is XSS...

PT-2016-7863

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS versions 12.x through 12.9 LTS Tiki Wiki CMS versions 15.x through 15.2 LTS Tiki Wiki CMS versions 16.x through 16.0 Description The issue is related to the lack of input sanitization for the geo zoomlevel to found location...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

Design/Logic Flaw

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

CVE-2016-5508

CVE-2016-5508 affects Oracle Sun Systems Products Suite Solaris Cluster 4.3, specifically the Cluster Geo subcomponent. The vulnerability is described as an unspecified local vulnerability in Solaris Cluster that can affect confidentiality. Technical details in connected documents show a local-pr...

CVE-2016-5508: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

daloRADIUS 0.9-9 SQL Injection / Code Execution Vulnerabilities

Exploit for php platform in category web applications Abstract -------- "daloRADIUS is an advanced RADIUS web management application aimed at managing hotspots and general-purpose ISP deployments. It features user management, graphical reporting, accounting, a billing engine and integrates with...

PT-2016-6496

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite version 4.3 Description The issue affects confidentiality and is related to the Cluster Geo in the Solaris Cluster component, allowing local users to exploit it. Recommendations For Oracle Sun Systems Products...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component (CNVD-2016-09693)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A local security vulnerability exists in the Cluster Geo subcomponent of the Solaris Cluster...

Photos On Dark Web Reveal Geo-locations Of 229 Drug Dealers — Here's How

It's a Fact! No matter how smart the criminals are, they always leave some trace behind. Two Harvard students have unmasked around 229 drug and weapon dealers with the help of pictures taken by criminals and used in advertisements placed on dark web markets. Do you know each image contains a rang...

Geo News - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Geo News published at the 'play' market has multiple vulnerabilities...

GEO EPOCHE | Geschichtsmagazin - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GEO EPOCHE | Geschichtsmagazin published at the 'play' market has multiple vulnerabilities...

GEO Magazin - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GEO Magazin published at the 'play' market has multiple vulnerabilities...