QuikCms 6.1 - CSRF Delete Web Pages Exploit

Exploit for php platform in category web applications Title : QuikCms 6.1 - CSRF Exploit Delete Web Pages Author : ZwX Vendor : http://opensolution.org/ Download Link : http://opensolution.org/download/home.html?sFile=Quick.Cmsv6.1-en.zip Version : 6.1 Security Level : Medium Tested Os : Windows ...

Advertising Alliance to morph hung it to the Union HackingTeam vulnerability weapons attack millions of Internet users-vulnerability warning-the black bar safety net

In the 1 1 month, 3 6 0 Internet Security Center monitoring to a product called“restartokwecha“Downloader Trojan to intercept the amount of surge,and its trace is found, the Trojan turned out from the PConline Pacific computer network, the 1ting a listen to the music network, the...

Mozilla Firefox and Firefox ESR Browser Engine Buffer Overflow Vulnerability

Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox. A security vulnerability exists in the browser engine of Mozilla Firefox that allows remote attackers to construct malicious WEB pages that can be tricked into parsing the application to perform...

Debian DSA-3391-1 : php-horde - security update

It was discovered that the web-based administration interface in the Horde Application Framework did not guard against Cross-Site Request Forgery CSRF attacks. As a result, other, malicious web pages could cause Horde applications to perform actions as the Horde user. The oldstable distribution...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

Mozilla Firefox 'SavedStacks' Class Denial of Service Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability in the Mozilla Firefox JavaScript implementation of the 'SavedStacks' class allows remote attackers to construct malicious WEB pages that can crash an application by tricking the user into parsing them...

Vulnerabilities of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to execute arbitrary code or trigger a service failure

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a denial-of-service attack using a specially crafted web page...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06177)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct malicious web pages that can be tricked into being parsed by users, which can crash the applicatio...

Apple iOS Safari User Interface Forgery Vulnerability (CNVD-2015-06199)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS Safari, which allows attackers to exploit a vulnerability to build malicious web pages that can be tricked into parsing, which can spoof the user interface...

Apple iOS Webkit Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A vulnerability in Apple iOS Webkit's handling of the Content-Disposition header that contains type attachments allows attackers to construct malicious web pages that can be parsed by tricking the user in...

Google Chrome decompose() denial of service vulnerability

Google Chrome is a WEB-based browser. The decompose function in platform/transforms/TransformationMatrix.cpp in Google Chrome Blink does not validate that the matrix inversion was successful, allowing remote attackers to construct malicious WEB pages and trick users into parsing them, which can...

Google Chrome has multiple unspecified vulnerabilities (CNVD-2015-05858)

Google Chrome is a WEB-based browser. Google Chrome has multiple unspecified vulnerabilities that allow remote attackers to construct malicious WEB pages and trick users into parsing them, which can crash applications or execute arbitrary code...

Google Chrome GPU processing implements memory misreference vulnerability

Google Chrome is an open source WEB browser. A memory misreference vulnerability in the Google Chrome GPU processing implementation allows attackers to construct malicious WEB pages that can be tricked into being parsed by the user, which can crash the application or execute arbitrary code...

Google Chrome skia memory corruption vulnerability

Google Chrome is an open source WEB browser. A memory corruption vulnerability in SkPictureShader.cpp in Google Chrome Skia allows attackers to construct malicious WEB pages that can be parsed by the user and can execute arbitrary code...

devel/ipython -- CSRF possible remote execution vulnerability

Kyle Kelley reports: Summary: POST requests exposed via the IPython REST API are vulnerable to cross-site request forgery CSRF. Web pages on different domains can make non-AJAX POST requests to known IPython URLs, and IPython will honor them. The user's browser will automatically send IPython...

Adobe Flash Player and AIR Memory Corruption Vulnerability (CNVD-2015-04558)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR are implemented with a...

Microsoft Windows Media Player Remote Code Execution Vulnerability

Microsoft Windows Media Player is a free media player. A security vulnerability in Microsoft Windows Media Player's handling of specially crafted DataObjects allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Microsoft Internet Explorer Elevation of Privilege Vulnerability

Microsoft Internet Explorer is a popular WEB browser. Microsoft Internet Explorer has an unspecified security vulnerability that allows remote attackers to construct malicious WEB pages that can be parsed by users with elevated privileges...

Apple Safari Remote URI Spoofing Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari that allows attackers to conduct phishing attacks by exploiting the vulnerability to construct malicious WEB...

CVE-2015-0757

The web framework in Cisco Identity Services Engine ISE 1.21.901 and 1.30.722 does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140...