2891 matches found
Uber: It is possible to re-rate a driver after a very long time
Hi It is not possible to edit your rating but there is a way to bypass that restriction Steps: 1- login to your uber account https://riders.uber.com 2- View your trips https://riders.uber.com/trips 3- choose one of your trips 4- click on resend 5- check your email 6- you will find a button in ema...
The vulnerability of the Moodle learning management system allows a hacker to obtain confidential information.
The vulnerability of the rating component in the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information by reading the value of the rating component...
OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net
Details 3 6 0 including a portion of the information security practice of course, the“3 6 0 Information Security Department”progressively adhering to best security practices in the https and other ssl fields gradually made significant changes. Such as important system to prohibit unsafe cipher...
CVE-2015-5268
The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value...
UBUNTU-CVE-2015-5268
The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value...
CVE-2015-5268
The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value...
CVE-2015-5268
The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value...
CVE-2015-5268
Summary (concrete details available): Moodle's rating component (versions up to 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2) is affected by improper group-based authorization checks that allow remote authenticated users to read a rating value and obtain sensitive infor...
WordPress Comment Rating 1.5.0 Cross Site Scripting
FULL DISCLOSURE Product : wp-comment-rating Exploit Author : Rahul Pratap Singh Version : 1.5.0 Home page Link : http://codecanyon.net/item/wordpress-comment-rating-plugin/6582710 Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 30/Jan/2016 XSS...
edrie.com XSS vulnerability
Vulnerable URL: http://edrie.com/links/index.cfm?groupname=Government=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
D-Link DIR-816L Cross Site Request Forgery Vulnerability
D-Link DIR-816L suffers from a cross site request forgery vulnerability. Title: ==== D-link wireless router DIR-816L – Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-5999 Date: ==== 10-11-20...
ESA-2015-142: RSA Archer® GRC Platform Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-142: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2015-142 CVE Identifier: CVE-2015-4541, CVE-2015-4542, CVE-2015-4543 Severity Rating: CVSS v2 Base Score: View details below for individual CVSS v2 scores Affected...
October 2015 Adobe Acrobat Adobe Acrobat Patches
Adobe is expected next week to patch critical vulnerabilities in Acrobat and Reader. The company today gave advanced notification of the impending updates to both products. The patches will be released on Tuesday, which figures to be a busy day for system administrators given that Microsoft will...
Zaption: Cheating at gallery rating
Hello! Example: http://www.zaption.com/listing/55aba5719c77e5386eb28df0 We can rate tour any mark by POST http://www.zaption.com/ajax/gallery/listing/tourid/rate/mark For example: POST http://www.zaption.com/ajax/gallery/listing/55aba5719c77e5386eb28df0/rate/100000000000000000 So, we have "curve"...
WhatsApp, Viber and Skype Internet Calls may No Longer be FREE in India
We all are aware of Net Neutrality and the recent controversies over it in India. Net Neutrality is simply the Internet Freedom — Free, Fast and Open Internet for all. India has been battling for Net Neutrality since zero-rating services such as Facebook’s Internet.org and Airtel Zero were...
topturizm.ru XSS vulnerability
Vulnerable URL: http://www.topturizm.ru/rating?search='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1681605 Google Pagerank| 4 VIP website status:| No Check topturizm.ru SSL...
Cisco Unified CDM platform exposure of privileged accounts and static passwords-vulnerability warning-the black bar safety net
! Cisco's Unified CDM communications domain Manager was revealed to contain a default that cannot be modified privileged accounts and the use of static password, the attacker can use the platform to remote attacks and intrusions. Vulnerability Cisco's Unified CDM is a Cisco hosted collaboration...
WordPress Yet Another Stars Rating Plugin <= 0.9.0 - Blind SQL Injection
Because of this vulnerability, remote authenticated users with 'publishposts' role can execute arbitrary SQL commands. Solution Update the plugin...
Udemy: Extremely high Course rating values could be set in order to make really high Average rating of the course. Negative values could be set to.
Authenticated user can register for some course paid or free. After registering and taking couple of lectures "Rate course" functional becomes active. Malicious user can fill the rating form and submit it. By intercepting request to the server's API by using intercepting proxy tool and modify...