BackCountry Nav Topo Maps GPS - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application BackCountry Nav Topo Maps GPS published at the 'play' market has multiple vulnerabilities...

Pebble Nav Me (Trial) - Customized SSL, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Pebble Nav Me Trial published at the 'play' market has multiple vulnerabilities...

DEBIAN-CVE-2015-5732

Cross-site scripting XSS vulnerability in the form function in the WPNavMenuWidget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title...

CVE-2015-5732

Cross-site scripting XSS vulnerability in the form function in the WPNavMenuWidget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title...

WordPress <= 4.2.3 - Nav Menu Title Cross-Site Scripting (XSS)

...

Google to Publish Research on Browser Ad Injectors

Google is preparing to release new research on the prevalence of ad injectors, the often-unwanted browser extensions that inject ads onto Web pages, and the numbers will show just how widespread and problematic the software is. Ad injectors belong to that great, amorphous pile of applications tha...

XSS using WebFragmentBuilder for WebItemProvider

The label is not escaped properly when using WebFragmentBuilder to generate links for JIRA's nav dropdown. This only happens when is not present in the relevant WebSection...

Joomla Component com_spidercalendar Remote Exploit

Exploit for php platform in category web applications Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor:...

DEBIAN-CVE-2010-5049

SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...

CVE-2010-5049

SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...

724CMS Enterprise Version 4.59 (section.php) LFI Vulnerability

Exploit for php platform in category web applications ============================================================== 724CMS Enterprise Version 4.59 section.php LFI Vulnerability ==============================================================...

PlugSpace 0.1 - navi Local File Inclusion

PlugSpace 0.1 - navi Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PlugSpace v0.1 Local File Inclusion Vulnerability Download:...

CVE-2006-5862

Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized NAV before 3.1.1 allows attackers with filesystem write access to have an unknown impact via unknown attack vectors...

CVE-2006-5862

The CVE-2006-5862 entry describes a directory-traversal vulnerability in the NAV web interface’s session mechanism (NAV prior to 3.1.1). It allows attackers with filesystem write access to cause an impact of an undefined nature via unknown attack vectors. The sources provide the affected product ...

CVE-2006-5800

Cross-site scripting XSS vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-5800

The CVE-2006-5800 entry describes a cross-site scripting (XSS) vulnerability in the default.asp page of the xenis.creator CMS. The issue arises when an attacker can supply a crafted value for the nav parameter, enabling the injection of arbitrary web script or HTML. The available data indicate im...

CVE-2006-5800

Cross-site scripting XSS vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

I-Nav VUpdater.Install ActiveX Buffer Overflow

The remote host contains an ActiveX control, 'VUpdater.Install', associated with Verisign I-Nav, which provides support for Internationalized Domain Names in Microsoft Internet Explorer, Outlook and Outlook Express that reportedly contains a buffer overflow vulnerability that arises when processi...

ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability

ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-014.html May 10, 2006 -- CVE ID: CVE-2006-2273 -- Affected Vendor: Verisign -- Affected Products: i-Nav ActiveX Control -- TippingPointTM IPS Customer Protection: TippingPoin...

Verisign I-Nav ActiveX Control Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Verisign i-Nav ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. The specific flaw exists within the...