CVE-2016-0289

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...

CVE-2016-0289

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...

Code injection

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...

CVE-2016-0289

CVE-2016-0289 affects IBM Maximo Asset Management SHIPREC (shiprec.xml) in core 7.6 and 7.5. It allows an authenticated user to bypass item-selection restrictions via the SHIPREC application. Affected versions: Maximo Asset Management 7.6 and 7.5 (and related Industry Solutions/SmartCloud Control...

CVE-2016-0289

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...

CVE-2016-0289: Improper Access Control

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...

graphite2: Heap-based buffer overflow in context item handling functionality

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

graphite2: Heap-based buffer overflow in context item handling functionality

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Privilege escalation / stored XSS vulnerabilities Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage:...

Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

Secure Item Hub 1.0 XSS / Code Execution / File Upload

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted toolbar item...

PT-2015-2269

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to improper validation of iCloud keychain item ACLs in the Apple Online Store Kit. This allows attackers to obtain access to keychain items via a crafted app. The vulnerabilit...

Apple OS X keychain information disclosure vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability in the Apple OS X iCloud keychain item checksum access control list allows an attacker to exploit the vulnerability to access a targeted user's keychain item...

PT-2015-7485

Name of the Vulnerable Software and Affected Versions CP Reservation Calendar plugin versions prior to 1.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter in a "dex reservations calendar load2" action or the dex item...

Wireshark protocol-tree denial-of-service vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability exists in the 'prototreeaddbytesitem' function in the epan/proto.c file in the protocol-tree implementation of Wireshark versions 1.12.7 prior to 1.12.x. T...

PT-2015-7130

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.6 Description The issue is related to the proto tree add bytes item function in the protocol-tree implementation. It does not properly terminate a data structure after a failure to locate a number within ...

SQL Injection Vulnerability in ItemNo Parameter of Nanjing GenoHan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. There is a SQL injection vulnerability in the ItemNo...

WordPress Albo Pretorio Online Plugin 3.2 - Multiple Vulnerabilities

There are multiple vulnerabilities in Albo Pretorio Online plugin, such as SQL injection, CSRF and stored XSS. Also, some reflected XSS. Because of these vulnerabilities, the item deletion is unprotected and any element could be deleted, also, eash form input is vulnerable. Solution Upgrade the...