673 matches found
UBUNTU-CVE-2015-1296
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
Code injection
The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...
WordPress Ads In Bottom Right 1.0 Cross Site Scripting
Title: WordPress 'Ads in bottom right' Plugin Version: 1.0 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/ads-in-bottom-right/ - https://plugins.svn.wordpress.org/ads-in-bottom-right/ Notified Vendor/WordPress: 2015-06-21...
Vulnerability in Oracle Right Now Service Cloud Knowledge Component
Oracle Right Now Service Cloud is a suite of cloud-based service solutions that provide features such as chat services, cross-channel community collaboration and content management. A security vulnerability exists in the Information Manager Console subcomponent of the Oracle Knowledge component o...
CVE-2015-0440
Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers to affect integrity via unknown vectors related to Information Manager Console...
CVE-2015-0440
Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers to affect integrity via unknown vectors related to Information Manager Console...
CVE-2015-0440
CVE-2015-0440 concerns the Oracle Right Now Service Cloud, specifically the Knowledge component and its Information Manager Console. Multiple sources describe an unnamed vulnerability in this component that could allow remote attackers to affect system integrity. The connected CNVD entry reiterat...
PT-2015-4643
Name of the Vulnerable Software and Affected Versions Oracle Right Now Service Cloud versions 8.2.3.10.1 through 8.4.7.2 Description The issue affects the integrity of the system, related to the Information Manager Console in the Oracle Knowledge component. The exact nature of the vulnerability a...
CVE-2015-0440: Undefined Security Weakness
Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers to affect integrity via unknown vectors related to Information Manager Console...
“Tear forced war”in the second quarter: Google found Windows 7 and Windows 8.1 there is a local mentioning right and sandbox escape vulnerabilities, Microsoft deny it-vulnerability warning-the black bar safety net
The Google security team recently found that Windows 7 and Windows 8.1 there is a local mentioning right and sandbox escape vulnerabilities, it was Microsoft's ruthless denied. Google will publish vulnerability details and POC. Vulnerability description This problem exists in theoperating systems...
Veeam Management Pack for System Center 7.0 R2 Update
Challenge Release notes for Veeam Management Pack for System Center 7.0 R2 Update Cause Please confirm you are using Veeam MP version 6.0, 6.5 or 7.0 prior to installing this patch. You can check this in SCOM Console | Administration | Management Packs. The 7.0 GA version of Veeam MPs will be...
CVE 2013-6272 Android phone provide right to call vulnerability analysis-vulnerability warning-the black bar safety net
Description This class of vulnerability by the German security research organisation Curesec discovered late last year when the secret to tell Google until this year 7 month when it decided to publish a similar vulnerability. This vulnerability relates to the com. android. phone...
Malicious Ads on Yahoo, AOL, Trigger CryptoWall Infections
Attackers have been leveraging the FlashPack Exploit Kit to peddle the CryptoWall 2.0 ransomware on unsuspecting visitors to sites such as Yahoo, The Atlantic and AOL. Researchers believe that for about a month the malvertising campaign hit up to 3 million visitors and netted the attackers $25,00...
CVE-2014-7663: Undefined Security Weakness
The Right to the Nitty Gritty aka com.wGoNittyGritty application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Adobe Acrobat Reader 7-9 - U3D BoF
No description provided by source. Copyright c 2009, Felipe Andres Manzano [email protected] All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source...
Instant PDF Password Remover v3.5 - Free PDF Password & Restrictions Removal Tool
Instant PDF Password Remover is the FREE tool to instantly remove Password of protected PDF document. It can remove both User & Owner password along with all PDF file restrictions such as Copy, Printing, Screen Reader etc. Often we receive password protected PDF documents in the form of mobile...
Hidden File Finder v3.0 - Free Tool to Find and Unhide/Remove all the Hidden Files
Hidden File Finder is the free software to quickly scan and discover all the Hidden files on your Windows system. It performs swift multi threaded scan of all the folders parallely and quickly uncovers all the hidden files. It automatically detects the Hidden Executable Files EXE, DLL, COM etc an...
Design/Logic Flaw
The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers IRIs, which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left RTL Unicode text...
PT-2014-1093
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Description The issue is related to the improper handling of bidirectional Internationalized Resource Identifiers IRIs in the UnescapeURLWithOffsetsImpl function. This makes it easier for remote...
PT-2014-2194
Name of the Vulnerable Software and Affected Versions Advanced Forum Signatures plugin version 2.0.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the afs bar right parameter in the signature.php file of the Advanced Forum Signatures plugin...