27 matches found
The vulnerability of Intel Core processors lies in the lack of protection for system data, which allows attackers to exploit this to disclose confidential information.
The vulnerability of Intel Core processors is related to the lack of protection for system data. Exploiting this vulnerability can allow attackers to disclose the protected information...
Ubiquiti Inc.: Privilege Escalation: From operator to ubnt (and root) with non-interactive Session Hijacking
EdgeOS version 1.9.1 and prior, consequence of lack of protection if the file-system, exposing sensitive information, an attacker with access to an operator read-only account, can escalate privileges to admin root access in the system...
The vulnerability of the Android operating system, which allows a hacker to gain access to data
The vulnerability in the NVIDIA Android operating system’s video driver is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to gain access to local malicious applications to data that they do not have permission to access. This issue is...
The vulnerability of the Firefox OS operating system allows a perpetrator to gain access to protected information contained in system messages.
The vulnerability of the Firefox OS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information contained in system messages, through a specially crafted application...
WordPress Ultimate Product Catalogue 3.1.2 XSS / CSRF / File Upload
Exploit Title: Multiple Persistent XSS & CSRF & File Upload on Ultimate Product Catalogue 3.1.2 Google Dork: inurl:"SingleProduct" intext:"Back to catalogue" intext:"Category", inurl:"/wp-content/plugins/ultimate-product-catalogue/product-sheets/" Date: 22/04/2015 Exploit Author: Felipe Molina de...
Pilot CMS Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
CMS Pylot suffers from cross site request forgery and cross site scripting vulnerabilities. These are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in CMS Pylot "Ïèëîò" on Russian. It's Ukrainian commercial CMS from Delta-X. ------------------------- Affected products:...
