PT-2017-15102

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...

PT-2017-15093

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Realestate Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the gplu...

PT-2017-14863

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...

PT-2017-14040

Name of the Vulnerable Software and Affected Versions Rate Me version 1.0 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to the lack of proper input validation in the id field when a rate action is performed. Recommendation...

Microsoft Windows Device Guard Local Security Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security bypass vulnerability in the implementation of Microsoft Windows Device Guard could allow an attacker to inject malicious code into a Windows PowerShell session...

PT-2017-3124

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607, and 1703 Windows Server 2016 Description The issue is related to how Microsoft Device Guard handles Windows PowerShell sessions, allowing a security feature bypass. This is due to insufficient...

Seven More Chrome Extensions Compromised

The number of compromised Chrome browser extensions is growing beyond the initial Aug. 1 hijacking of the OCR add-on called Copyfish. Added to list are seven additional legitimate Chrome Extensions that attackers took over and used to manipulate internet traffic and web-based ads, according to...

Joomla! cross-site scripting vulnerability (CNVD-2017-26330)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.7.4. The vulnerability stems from the program's failure to adequately...

CVE-2017-0215

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

CVE-2017-0218: Undefined Security Weakness

Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Poli...

CVE-2017-0215: Exposure of Resource to Wrong Sphere

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

CVE-2017-0219: Undefined Security Weakness

Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Poli...

CVE-2017-0216: Undefined Security Weakness

Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Featu...

CVE-2017-0173: Undefined Security Weakness

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

PT-2017-16875

Name of the Vulnerable Software and Affected Versions Symphony version 2.6.9 Description The issue concerns a problem with the software where an attacker can inject malicious code. This is possible through the publish/notes/edit//saved/ endpoint, specifically via the bottom form field...

Apache NiFi Cross-Site Scripting Vulnerability

Apache NiFi is an automated solution for data transfer between systems. Apache NiFi suffers from a cross-site scripting vulnerability in the connection details dialog box, which allows an attacker to inject malicious code into the affected site...

WordPress Download Manager Free 2.7.94 / Pro 4 XSS

WordPress Download Manager Free 2.7.94 & Pro 4 Authenticated Stored XSS Vendor Homepage: http://www.wpdownloadmanager.com Software Link: https://wordpress.org/plugins/download-manager Affected Versions: Free 2.7.94 & Pro 4 Tested on: WordPress 4.2.2 Discovered by Filippos Mastrogiannis Twitter:...

The popular WordPress caching plugin WP-Super-Cache aeration high-risk security vulnerabilities-vulnerability warning-the black bar safety net

The popular WordPress caching plugin WP-Super-Cache recently exposed high-risk vulnerability, the attacker may be in a page to inject malicious code, which makes millions of WordPress websites in danger. WP Super Cache is a classic veteran and a good cache plugin can greatly improve website...

Ezhometech Ezserver 6.4 Stack Overflow Exploit

No description provided by source. Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...

Threat Outbreak Alert: Fake Payment Slip Notification Email Messages on December 19, 2013

Medium Alert ID: 32245 First Published: 2013 December 20 14:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment transfer details for the recipient. The text in the email message attempts to convince the recipient ...