MC Real Estate Pro Script - Improper Access Restrictions

MC Real Estate Pro Script - Improper Access Restrictions Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Real Estate Pro Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858 Author: İhsan Şencan Author We...

MC Coming Soon Script - Arbitrary File Upload Improper Access Restrictions

MC Coming Soon Script - Arbitrary File Upload Improper Access Restrictions Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Coming Soon Script Script Buy Now: http://microcode.ws/product/mc-coming-soon-php-script/3880 Author: İhsan...

Inout SmartDeal 1.0 Script - Improper Access Restrictions

Inout SmartDeal 1.0 Script - Improper Access Restrictions Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout SmartDeal Script Script Version: v1.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-smartdeal/demo/ Author: İhsan...

Inout StickBoard 1.0 Script - Improper Access Restrictions

Inout StickBoard 1.0 Script - Improper Access Restrictions Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout StickBoard Script Script Version: v1.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-stickboard/demo/ Author: İhsan...

Inout QuerySpace 1.0 Script - Improper Access Restrictions

Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout QuerySpace Script Script Version: v1.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-queryspace/demo/ Author: İhsan Şencan Author Web: http://ihsan.net Mail :...

CVE-2016-6636

The OAuth authorization implementation in Pivotal Cloud Foundry PCF before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.1; and Ops Manager 1.7.x before...

(0Day) Google Chrome Protocol Handler Logic Error Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass restrictions on vulnerable installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of URIs...

Mozilla Firefox < 48.0 Multiple Vulnerabilities

Binary data 9484.prm...

Multiple I-O DATA DEVICE Products Cross-Site Request Forgery Vulnerability

The I-O DATA DEVICE HVL-A is a high-definition recording hard disk from Japan's I-O DATA DEVICE. A cross-site request forgery vulnerability exists in a number of I-O DATA DEVICE products, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicio...

Microsoft Internet Explorer Information Disclosure (MS16-095: CVE-2016-3321)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Microsoft Internet Explorer while handling URIs. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

Code injection

Mozilla Firefox before 48.0 does not properly restrict drag-and-drop aka dataTransfer actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site...

OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...

UBUNTU-CVE-2016-4553

clientside.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request...

Apache Cordova iOS Arbitrary Plugin Execution Vulnerability

Adobe PhoneGap is a set of open source development frameworks. Apache Cordova iOS is a set of platforms for developing iOS-based mobile applications using HTML, CSS, and JavaScript, and is the core engine that drives PhoneGap. A security vulnerability exists in Apache Cordova iOS that allows remo...

Cisco WebEx Meetings Server Open Redirect Vulnerability

Cisco WebEx Meetings Server is a versatile meeting solution that includes audio, video, and Web conferencing in the WebEx Meeting Solution. An open redirection vulnerability exists in Cisco WebEx Meetings Server that allows an attacker to construct malicious URIs, trick users into parsing them, a...

Slack: Stored XSS on team.slack.com using new Markdown editor of posts inside the Editing mode and using javascript-URIs

Hi, I noticed while looking at an old article I made a while ago that some links were actually inserted as javascript:-links. Doing some modifications to these actually revealed that inside editing mode, no protection is added for getting arbitrary scripts to run. This means that by catching the...

Uber: XSS in uber oauth

Hi , I have found that when setting a redirecturi for an application you validate for the presence of :// in the beginning of the url , but you don't validate for the protocol and you don't block malicious protocols such as javascript: pseudo protocol and data: URIs. Although the redirecting is...

Apache Subversion < 1.7.19, 1.8.x < 1.8.11 DoS Vulnerability (Feb 2016)

Apache Subversion is prone to a denial of service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

WordPress 3.7-4.4.1 - Local URIs Server Side Request Forgery (SSRF)

...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20151216)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2015-7201, CVE-2015-7205, CVE-2015-7210, CVE-2015-7212,...