Open-Letters 1.0.5 RCE

Remote command execution vulnerability in Open-Letters 1.0.5 ajaxcreatefolder.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Season Sales - Shopping Salon - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Season Sales - Shopping Salon published at the 'play' market has multiple vulnerabilities...

Sales Rep Route Planner - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sales Rep Route Planner published at the 'play' market has multiple vulnerabilities...

MYBESTBRANDS Fashion & Sales - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MYBESTBRANDS Fashion & Sales published at the 'play' market has multiple vulnerabilities...

Joomla! Administrator File Upload [Templates]

Joomla! allows administrators to create and edit files using the template management page Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Joomla! Administrator File Upload [Extensions]

Joomla! allows administrators to upload extensions. Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Symphony 2.6.3 SQL Injection

SQL injection vulnerability in Symphony fieldsemail parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities

Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities Vendor: Infor Product web page: http://www.infor.com Affected version: 8.2.0.1136 Summary: Infor® CRM, formerly Saleslogix, is an award-winning customer...

magento < 1.9 xss vulnerability fix description-vulnerability warning-the black bar safety net

magento XSSthe vulnerability description did not say Baidu about everywhere Here a simple record handling process, and compare the rough, whether effective not yet verification Edit app/design/adminhtml/default/default/template/sales/order/view/info. phtml File Search getCustomerEmail There are t...

Panasonic FPWIN Pro Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from Trend Micro’s Zero Day Initiative ZDI concerning buffer overflow vulnerabilities in Panasonic FPWIN Pro software. These vulnerabilities were reported to ZDI by security researcher Steven Seeley. Panasonic has produced a new version to mitigate these...

Exponent 2.3.7 RCE

Remote command execution vulnerability in Exponent /install/index.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla Component com_mydyngallery SQL Injection

SQL Injection vulnerability in Joomla Mydyngallery Component directory parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert RuleID20841: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43375 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20841 may contain the following files: Name |...

MyBB 1.8.2 RCE

Remote command execution vulnerability in MyBB Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

SA110 : Java Deserialization Vulnerabilities

SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...

Wordpress WP Symposium 15.1 SQL Injection

SQL Injection vulnerability in Wordpress WP Symposium Plugin show parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Core SQLi list[select]

SQLi in dynamic SQL query generation Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert RuleID20063: Email Messages Distributing Malicious Software on December 13, 2015

Medium Alert ID: 42650 First Published: 2015 December 14 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20063 may contain the following files: Name |...

jimmysestatesales.com XSS vulnerability

Vulnerable URL: http://www.jimmysestatesales.com/viewImage.cfm?Image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Shopify: shopifyapps.com XSS on sales channels via currency formatting

pinterest, twitter, buy button and facebook sales channels vulnerable to xss via currency formatting. steps to reproduce: - remove pinterest, twitter, buy button and facebook sales channels at .myshopify.com/admin/channels - go to .myshopify.com/admin/settings/general - change currency formating ...