808 matches found
CVE-2017-1000148: Deserialization of Untrusted Data
Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass portions of the XML through the PHP "unserialize" function when importing a skin from an XML file...
Arbitrary Account Registration and Arbitrary Password Reset Vulnerability in Skin Beauty With Heart APP
Beauty with a Purpose App is a skincare app that allows you to test your skin type and learn more about skincare. There is an arbitrary account registration and arbitrary password reset vulnerability in Skin Care APP. Attackers can register any account and reset any password by capturing packets...
CWCMS background admin/cw_skin.php page has arbitrary file write vulnerability
CWCMS is an enterprise website management system. An arbitrary file write vulnerability exists in the admin/cwskin.php page of the CwCMS-PHP enterprise website management system, allowing attackers to write arbitrary executable files and gain server privileges...
CVE-2017-5945
An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insufficient filtration of user-supplied data in the "poodllaudiourl" HTTP GET parameter passed to the "filterpoodllmoodle322016112802/poodll/mp3recorderskins/brazil/index.php" URL. An...
UBUNTU-CVE-2017-5490
Cross-site scripting XSS vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to...
CVE-2016-4852
YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...
CVE-2016-4852: Improper Input Validation
YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...
LebiShop Mall Backend Select Skin Catalog Traversal Vulnerability
LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The administrative background of this mall system provides a template management function , when editing the pages in the template , it provides the...
High School Salon: Beauty Skin - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application High School Salon: Beauty Skin published at the 'play' market has multiple vulnerabilities...
Color Rain Emoji Keyboard Skin - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Color Rain Emoji Keyboard Skin published at the 'play' market has multiple vulnerabilities...
Skin Cancer App - MySkinPal - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Skin Cancer App - MySkinPal published at the 'play' market has multiple vulnerabilities...
[SECURITY] Fedora 22 Update: vdr-skinnopacity-1.1.3-9.fc22
The VDR plugin "nOpacity" is a highly customizable native true color skin for the Video Disc Recorder...
DEBIAN-CVE-2015-8770
Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...
UBUNTU-CVE-2015-8770
Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...
Debian DLA-392-1 : roundcube security update
High-Tech Bridge Security Research Lab discovered a path traversal vulnerability in a popular webmail client Roundcube. Vulnerability can be exploited to gain access to sensitive information and under certain circumstances to execute arbitrary code and totally compromise the vulnerable server. Th...
roundcubemail: remote code execution
High-Tech Bridge Security Research Lab discovered a path traversal vulnerability in Roundcube. Vulnerability can be exploited to gain access to sensitive information and under certain circumstances to execute arbitrary code and totally compromise the vulnerable server. The vulnerability exists du...
Roundcube Remote Code Execution Vulnerability
Roundcube is open source software. A remote code execution vulnerability exists in Roundcube. Because the "skin" HTTP POST parameter is not sufficiently filtered in the "/index.php" script, a remotely authenticated attacker can use a path traversal sequence e.g. "... /... /" to be loaded from any...
cheyenneskinclinic.com XSS vulnerability
Vulnerable URL: http://www.cheyenneskinclinic.com/search.asp?searWords=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:27 GMT Vulnerability type:| XSS Vulnerability...
Fedora 22 : roundcubemail-1.1.2-1.fc22 (2015-11405)
Release 1.1.2 - Add new plugin hook 'identitycreateafter' providing the ID of the inserted identity 1490358 - Add option to place signature at bottom of the quoted text even in top-posting mode sigbelow - Fix handling of %-encoded entities in mailto: URLs 1490346 - Fix zipped messages downloads...
