1824 matches found
Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26283)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...
Design/Logic Flaw
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
UBUNTU-CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-2642
CVE-2017-2642 affects Moodle 3.x, causing a user fullname disclosure on the user preferences page. The incident is supported by multiple feeds in connected data, including CVE reporting and OpenVAS/Nessus entries that reference Moodle moodle 3.x and the associated Fedora updates. CVSS metrics ind...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
The vulnerability of the software for organizing collaborative work among users in Horde Groupware allows a hacker to break the encryption of emails.
The vulnerability of the Horde Groupware software for organizing collaborative work among users is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a malicious actor, who must act remotely and who is a verified user of Horde Webmail and has access to PG...
Simple Vulnerability Remediation Collaboration with InsightVM
Many security groups today use ticketing systems that were originally designed for IT or developers, and are usually ill-suited to their vulnerability management needs. Even more commonly, teams simply rely on spreadsheets and unwieldy reports. On the other end of the spectrum, some security team...
thunderbird security update
52.1.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.1.0-1 - Update to 52.1.0 52.0.1-1 - Update to 52.0.1...
Ultrasonic Beacons Are Tracking Your Every Movement
More than 200 Android mobile applications listen surreptitiously for ultrasonic beacons embedded in audio that are used to track users and serve them with targeted advertising. Academics from Technische Universitat Braunschweig in Germany recently published a paper in which they describe their...
Inspeckage - (Android Package Inspector) Dynamic Analysis With Api Hooks, Start Unexported Activities And More
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage https://twitter.com/inspeckage...
Weblate: [demo.weblate.org] Stored Self-XSS via Editor Link in Profile
Hi, Input validation and/or sanitisation is not currently applied to the "Editor Link" in the user's Preferences. Consequently, it is possible to store a JavaScript payload which is stored and executes in the Weblate instance context. F178717 Steps to reproduce 1. Visit the above Preferences page...
PT-2017-10802 · Apple +1 · Darwin +1
Name of the Vulnerable Software and Affected Versions: Darwin affected versions not specified Description: The issue concerns the handling of root certificates on Darwin systems. Specifically, if a user has a root certificate loaded in their Keychain that is explicitly marked as not trusted, Go...
Moodle 2.x/3.x - SQL Injection Exploit
Exploit for php platform in category web applications Exploit: Moodle SQL Injection via Object Injection Through User Preferences Date: April 6th, 2017 Exploit Author: Marko Belzetski Contact: email protected Vendor Homepage: https://moodle.org/ Version: 3.2 to 3.2.1, 3.1 to 3.1.4, 3.0 to 3.0.8,...
Moodle 2.x3.x - SQL Injection
Moodle 2.x3.x - SQL Injection Exploit: Moodle SQL Injection via Object Injection Through User Preferences Date: April 6th, 2017 Exploit Author: Marko Belzetski Contact: [email protected] Vendor Homepage: https://moodle.org/ Version: 3.2 to 3.2.1, 3.1 to 3.1.4, 3.0 to 3.0.8, 2.7.0 to 2.7.1...
Moodle 2.x/3.x - SQL Injection
Exploit: Moodle SQL Injection via Object Injection Through User Preferences Date: April 6th, 2017 Exploit Author: Marko Belzetski Contact: [email protected] Vendor Homepage: https://moodle.org/ Version: 3.2 to 3.2.1, 3.1 to 3.1.4, 3.0 to 3.0.8, 2.7.0 to 2.7.18 and other unsupported versio...
Command injection
In HordeCrypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user's preferences, and has enabled the "Should PGP signed messages be automatically verified when viewed?" preference. To exploit...