Oracle PeopleSoft Enterprise HCM Component Remote Data Read Vulnerability

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the human capital management HCM components. A remote data read...

"Schedule" function in Cybozu Office vulnerable to cross-site scripting

Overview Cybozu Office provided by Cybozu,Inc. contains a cross-site scripting vulnerability. Kusano Kazuhiko reported this vulnerability to Cybozu, Inc., and Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated...

WordPress Appointment Schedule Booking System - Authenticated Stored XSS

The wp-appointment-schedule-booking-system WordPress plugin was affected by an Authenticated Stored XSS security vulnerability...

WordPress Appointment Schedule Booking System Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Appointment Schedule Booking System Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Unbreakable Enterprise kernel security update

2.6.39-400.284.2 - Btrfs: fix truncation of compressed and inlined extents Divya Indi Orabug: 22307286 CVE-2015-8374 - Btrfs: fix file corruption and data loss after cloning inline extents Divya Indi Orabug: 22307286 CVE-2015-8374 - netfilter: xtables: make sure e-nextoffset covers remaining blob...

BlueHat v16 Schedule Announced

Over the summer we had overwhelming response to our BlueHat v16 call for papers. We would like to give a special thanks to all who submitted papers for consideration. The range of content and quality of content was exceptional. So with that, today we are happy to announce our schedule for the...

klia.com.my XSS vulnerability

Vulnerable URL: http://www.klia.com.my/index.php?m=airport=flightschedule=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 228950 VIP website status:| No Check klia.com.my SSL...

XenMobile Analyzer Tool

The new XenMobile Analyzer Tool is a cloud-based solution that allows XenMobile administrators to diagnose issues proactively and in real time. XenMobile Analyzer environmental checks can identify device issues, user enrollment issues, and authentication issues. Numerous use-cases and deployment...

wgbh.org XSS vulnerability

Open Bug Bounty ID: OBB-160667 Description| Value ---|--- Affected Website:| wgbh.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FlashFXP 5.3.0 Memory Corruption

Document Title: =============== FlashFXP v5.3.0 Windows - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Date: ============= 2016-06-13 Vulnerability Laboratory ID VL-ID: ====================================...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-12...

e-traffic.ru XSS vulnerability

Vulnerable URL: http://www.e-traffic.ru/schedule/kazanskoe?station=1144=%22%3E%3Cimg%20src=x%20onerror=alert%28%27OPENBUGBOUNTY%27%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:41 GMT Vulnerability type:| XSS Vulnerability status:|...

MSN Sports - Scores & Schedule - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MSN Sports - Scores & Schedule published at the 'play' market has multiple vulnerabilities...

EC 2016 Match schedule - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application EC 2016 Match schedule published at the 'play' market has multiple vulnerabilities...

TimeTune Schedule Planner - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TimeTune Schedule Planner published at the 'play' market has multiple vulnerabilities...

Doodle: Schedule Maker - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Doodle: Schedule Maker published at the 'play' market has multiple vulnerabilities...

Bible Reading Schedule - Corrupted files, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Bible Reading Schedule published at the 'play' market has multiple vulnerabilities...

My shift schedule - team TRIAL - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application My shift schedule - team TRIAL published at the 'play' market has multiple vulnerabilities...

Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...