1427 matches found
Kaspersky Lab Bug Bounty Program Launches
LAS VEGAS – Kaspersky Lab today at Black Hat USA 2016 announced the launch of a public bug bounty, one of the few offered by a software vendor in the computer security industry. The bounty begins tomorrow on the HackerOne platform, and the first phase will run for six months. The company said tha...
HNB 1.9.18-10 - Local Buffer Overflow
HNB 1.9.18-10 - Local Buffer Overflow Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: HNB - Organizer Version: 1.9.18-10 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program...
Google to Face a Record $3.4 Billion AntiTrust Fine in Europe
Google faces a record anti-trust penalty of about 3 BILLION Euros US$3.4 Billion from the European Commission in the coming days, according to reports. After 7-years of the investigation, the European Commission filed anti-trust charges against Google last year for violating antitrust laws. The...
Tech News & Reviews - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Tech News & Reviews published at the 'play' market has multiple vulnerabilities...
Coinbase: Race condition allowing user to review app multiple times
There was a race condition present that would allow a user to review an OAuth application multiple times...
toysrus.de XSS vulnerability
Vulnerable URL: http://www.toysrus.de/reviews/index.jsp?productId=44692391...
With Its First Android app, Apple tried to Kill Android Community, But Failed Badly!
Are you a Die Hard Android Fan? If you are also one of those millions Android fans, for whom the brand has turned into an insane religious devotion, then Apple has something that could give you second thoughts. Apple is losing control, wants you to ditch your Android! Few days ago, Apple made its...
zillow.com XSS vulnerability
Vulnerable URL: http://www.zillow.com/agent-finder/real-estate-agent-reviews/?sortBy=None=False=alert/XSSPOSED/...
ReviewPost < 2.84 - Multiple Vulnerabilities
ReviewPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc. Product: ReviewPost Version: = 2.84 Website: http://www.reviewpost.com/ BID: 12159 CVE: CVE-2005-0270 CVE-2005-0271 CVE-2005-0272 OSVDB: 12703 12704 12705 12706 12707 12708 SECUNIA: 13697 PACKETSTORM: 35594 Description: Your communi...
XOOPS Module Lykos Reviews SQL Injection (CVE-2007-1817)
An SQL injection vulnerability has been reported in Lykoszine Lykos Reviews Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Terillion Reviews < 1.2 - Profile Id Field XSS
The terillion-reviews WordPress plugin was affected by a Profile Id Field XSS security vulnerability...
PostNuke 0.72/0.75 Reviews Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10802/info PostNuke is reported prone to a cross-site scripting vulnerability. This issue affects the 'title' parameter of 'Reviews' script. Exploitation of this issue could allow for theft of cookie-based authentication...
PHP-Nuke 6.x/7.x Encyclopedia Module Multiple Function XSS
No description provided by source. source: http://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple...
PHP-Nuke 6.x/7.x Reviews Module order Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple...
AJA Portal 1.2 - Local File Inclusion Vulnerabilities (win)
No description provided by source. -------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6...
Localize: HTML/Javascript possible in "Discussion" section of reviews
It's possible to enter HTML code and/or execute javascript code in the "Discussion" section for review. To reproduce: - Enter a new phrase in a project. - Login as a different user and provide a new translation for the phrase. - Switch back to the user that created the project and check the revie...
CVE-2013-2501
Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...
Cross site scripting
Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...
CVE-2013-2501
CVE-2013-2501 affects the Terillion Reviews WordPress plugin, specifically versions before 1.2. The vulnerability is a reflected/stored XSS via the ProfileId field in the plugin’s UI, allowing remote attackers to inject arbitrary HTML/script. Impact is an XSS risk in sites running the affected pl...
