W3 Total Cache <= 0.9.4.1 - Weak Validation of Amazon SNS Push Messages

The W3 Total Cache WordPress plugin was affected by a Weak Validation of Amazon SNS Push Messages security vulnerability...

Cross-site scripting vulnerability in wordpress plugin sns-image-gallery

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin sns-image-gallery due to a failure to...

Twitter the presence of high-risk vulnerabilities hackers can get Vine all the source code-bug warning-the black bar safety net

Twitterthe presence of high-risk vulnerabilities, the attacker can be downloaded from the serverVine（ Vineis Microsoft developing a location-basedSNSsystem all the source code, thenTwitterflowers5minutes time to fix the vulnerability. Security researcher Avicoder found this vulnerability, and in ...

sns.iianews.com Open Redirect vulnerability

Vulnerable URL: http://sns.iianews.com/link.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

リア充はじめました（仮）〜既読or放置！無料恋愛SNSゲーム - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application リア充はじめました（仮）〜既読or放置！無料恋愛SNSゲーム published at the 'play' market has multiple vulnerabilities...

Maticsoft SNS v1.9 CMSUploadFile.aspx 任意文件上传漏洞

No description provided by source...

Lenovo Switch Center Remote Privilege Vulnerability

Lenovo Switch Center formerly known as IBM System Networking Switch Center is a suite of applications used by Lenovo in China to remotely monitor and manage Ethernet converged switches. A remote elevation vulnerability exists in IBM System Networking Switch Center version 7.1.3.4 and earlier and...

ICZ MATCHA SNS Privilege Access Control Vulnerability

ICZ MATCHA SNS is a set of SNS software from ICZ Japan. A security vulnerability exists in ICZ MATCHA SNS 1.3.6 and earlier versions. A remote attacker can exploit this vulnerability to gain administrator privileges...

CVE-2015-5645

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

Code injection

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

Code injection

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

CVE-2015-5645

ICZ MATCHA SNS (MATCHA SNS) before 1.3.7 is vulnerable: remote authenticated users can obtain administrative privileges via unspecified vectors. Affected product: MATCHA SNS from ICZ Corporation, versions 1.3.6 and earlier. Root cause details are not specified in the provided documents; exploitat...

CVE-2015-5645

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2015-5644

CVE-2015-5644 affects ICZ MATCHA SNS prior to 1.3.7. The installer fails to correctly configure the database, enabling a code injection path that allows a remote attacker to execute arbitrary PHP code. The vulnerability is tied to installer-time database configuration (CWE-94) and culminates in c...

MATCHA SNS vulnerable to code injection

Overview MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#85118545: MATCHA SNS access restriction bypass vulnerability

MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains an access restriction bypass vulnerability. Impact A user without administrative privileges may obtain administrative privileges. Solution Update the Software Update to the latest version according to the information...

JVN#08535069: MATCHA SNS vulnerable to code injection

MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Impact An unauthenticated attacker who can execute the installer may execute arbitrary PHP code on the server where...

Samsung Patches Social Media Vulnerability in Millions of Devices

Samsung patched a vulnerability last month in SNS Provider, a popular application that manages other social media apps present in millions of its devices. If exploited the bug could have given attackers the ability to access to any personal information users stored on Facebook, LinkedIn and...