Joomla! Administrator File Upload [Extensions]

Joomla! allows administrators to upload extensions. Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Joomla! Administrator File Upload [Templates]

Joomla! allows administrators to create and edit files using the template management page Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Symphony 2.6.3 SQL Injection

SQL injection vulnerability in Symphony fieldsemail parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities

Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities Vendor: Infor Product web page: http://www.infor.com Affected version: 8.2.0.1136 Summary: Infor® CRM, formerly Saleslogix, is an award-winning customer...

magento < 1.9 xss vulnerability fix description-vulnerability warning-the black bar safety net

magento XSSthe vulnerability description did not say Baidu about everywhere Here a simple record handling process, and compare the rough, whether effective not yet verification Edit app/design/adminhtml/default/default/template/sales/order/view/info. phtml File Search getCustomerEmail There are t...

Panasonic FPWIN Pro Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from Trend Micro’s Zero Day Initiative ZDI concerning buffer overflow vulnerabilities in Panasonic FPWIN Pro software. These vulnerabilities were reported to ZDI by security researcher Steven Seeley. Panasonic has produced a new version to mitigate these...

Exponent 2.3.7 RCE

Remote command execution vulnerability in Exponent /install/index.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla Component com_mydyngallery SQL Injection

SQL Injection vulnerability in Joomla Mydyngallery Component directory parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert RuleID20841: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43375 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20841 may contain the following files: Name |...

MyBB 1.8.2 RCE

Remote command execution vulnerability in MyBB Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

SA110 : Java Deserialization Vulnerabilities

SUMMARY Blue Coat products that deserialize unsafe Java objects from untrusted sources are susceptible to one or more vulnerabilities. A remote attacker can exploit these vulnerabilities to cause the target to execute arbitrary code. AFFECTED PRODUCTS Cloud Data Protection for Salesforce CDP-SFDC...

Wordpress WP Symposium 15.1 SQL Injection

SQL Injection vulnerability in Wordpress WP Symposium Plugin show parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Core SQLi list[select]

SQLi in dynamic SQL query generation Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert RuleID20063: Email Messages Distributing Malicious Software on December 13, 2015

Medium Alert ID: 42650 First Published: 2015 December 14 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20063 may contain the following files: Name |...

jimmysestatesales.com XSS vulnerability

Vulnerable URL: http://www.jimmysestatesales.com/viewImage.cfm?Image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Shopify: shopifyapps.com XSS on sales channels via currency formatting

pinterest, twitter, buy button and facebook sales channels vulnerable to xss via currency formatting. steps to reproduce: - remove pinterest, twitter, buy button and facebook sales channels at .myshopify.com/admin/channels - go to .myshopify.com/admin/settings/general - change currency formating ...

Adele strong, the fans said personal information due to the ticket being leaked-and the vulnerability and early warning-the black bar safety net

! Silence after three years, the 2 5-year-old soul singer Adele bring new album the 2 5 on the strong back, the album was released the first week of the mad sweep of the Anglo-American sales record, the critics said: even if she sold the tape, it will also become a sales champion. And buy Adele...

HelpDEZk 1.0.1 File Upload

File upload vulnerability in HelpDEZk Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

vBulletin 5.1 RCE

Remote Code Execution in vBulletin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert RuleID18929: Email Messages Distributing Malicious Software on March 12, 2016

Medium Alert ID: 41699 First Published: 2015 October 26 13:44 GMT Last Updated: 2016 March 14 12:26 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18929 a...