2891 matches found
CVE-2017-12811
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...
CVE-2017-12811
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...
Cross site scripting
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...
CVE-2017-12811
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...
CVE-2017-12811
PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...
CVE-2017-12811
Summary of CVE-2017-12811 : PHPJabbers Star Rating Script 4.0 is affected by a stored cross-site scripting (XSS) vulnerability via a rating item. The CVE entry confirms the issue but does not provide explicit exploit details, affected file paths, or versions beyond 4.0 in the description. Connect...
Rating-Widget: Star Review System <= 2.8.9 - Enable Debugging
The Rating-Widget: Star Review System WordPress plugin was affected by an Enable Debugging security vulnerability...
CVE-2017-6262
NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Android ID:...
rating-avto.ru XSS vulnerability
Open Bug Bounty ID: OBB-444572 Description| Value ---|--- Affected Website:| rating-avto.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Identity Governance 12.6 Cross Site Scripting Vulnerability
Exploit for windows platform in category web applications Security Notice for CA Identity Governance CA Technologies support is alerting customers to a potential risk with CA Identity Governance. A vulnerability exists that can potentially allow a malicious actor to conduct cross-site scripting...
Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change
In the init action, this plugin checked to see if $POST'likebtnimportconfig' is empty. If it’s not empty then it base64-decodes the string, parses it as JSON, and starts changing options. This could allow attackers to change blog settings such as the Site Title. The below form will set the “Site...
Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change
In the init action, this plugin checked to see if $POST'likebtnimportconfig' is empty. If it’s not empty then it base64-decodes the string, parses it as JSON, and starts changing options. This could allow attackers to change blog settings such as the Site Title. PoC The below form will set the...
RHEL 7 : wget (RHSA-2017:3075)
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
When an “Outstanding” rating from CNET isn’t enough
The editors at respected tech site CNET/Download.com recently awarded Malwarebytes for Windows with an “outstanding” rating of 4.5 stars out of five. In the review, editor Tom McNamara recommended Malwarebytes because the scanning engine is of “high quality,” it works well with Windows 10, and do...
Escort Marketplace 1.0 - SQL Injection
Escort Marketplace 1.0 - SQL Injection Exploit Title: Escort Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/escort-website Demo: http://escortwebsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...
Patched Flash Player Sandbox Escape Leaked Windows Credentials
One of the patches included in Tuesday’s Adobe Flash Player update was a do-over after the researcher who privately reported the problem earlier this year discovered the original patch incompletely resolved the issue. Dutch researcher Bjorn Ruytenberg disclosed details after Adobe updated the...
Information Disclosure
Moodle is vulnerable to information disclosure. Authenticated attackers can read rating values to obtain sensitive information. This happens because it mishandles group-based authorization checks...
TYPO3 Content Rating Extbase Extension SQL Injection Vulnerability
TYPO3 is a content management system based on PHP4/PHP5+MYsql. TYPO3 Content Rating Extbase Extension suffers from a SQL injection vulnerability due to the program's failure to adequately filter user-supplied data before it is used in SQL queries. An attacker can exploit the vulnerability to...
SQL Injection in extension "Content Rating Extbase" (content_rating_extbase)
It has been discovered that the extension "Content Rating Extbase" contentratingextbase is susceptible to SQL Injection. Release Date: July 11, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.0.3 and below...
Cb Defense Scores Perfect 5-Star Overall Rating in SC Media Independent Test
What does it take to be the leading next-generation antivirus NGAV solution? Is it security efficacy? Is it visibility into malicious behavior throughout your enterprise? What about ease of use? SC Media recently looked to answer these questions and more by putting Cb Defense through its own...