CVE-2018-9859

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications...

Privilege escalation

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications...

CVE-2018-9859

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications...

CVE-2018-9859

The CVE-2018-9859 issue affects NAVER Whale prior to version 1.0.40.7, where the Whale update service path is unquoted. Root cause: an unquoted update service path can be leveraged to run executables with System privileges by other vulnerable apps, enabling persistent privilege escalation. Impact...

PT-2018-19080

Name of the Vulnerable Software and Affected Versions NAVER Whale versions prior to 1.0.40.7 Description The issue is related to an unquoted path in the Whale update service of NAVER Whale. This can potentially be exploited for persistent privilege escalation if an attacker can create an executab...

CVE-2018-9859: Undefined Security Weakness

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications...

whale-agency.com XSS vulnerability

Open Bug Bounty ID: OBB-560633 Description| Value ---|--- Affected Website:| whale-agency.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15913

The Installer in Whale allows DLL hijacking...

CVE-2017-15913

The Installer in Whale allows DLL hijacking...

CVE-2017-15913

The CVE-2017-15913 entry concerns Whale’s Installer, where the Installer module is susceptible to DLL hijacking. The affected component is the Whale Installer, and the root cause is a DLL search-order hijack during installation. According to NVD, the CVSS3 base score is 7.8 ( HIGH ) with LOCAL at...

CVE-2017-15913: Untrusted Search Path

The Installer in Whale allows DLL hijacking...

PT-2018-6028

Name of the Vulnerable Software and Affected Versions: Whale affected versions not specified Description: The issue in Whale allows for DLL hijacking through its Installer. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

gdm and gnome-session security, bug fix, and enhancement update

gdm 3.22.3-11 - Add japanese translation Resolves: 1449632 3.22.3-10 - Add patches to try to maintain some semblance of compatibility when live upgrading between 7.3 and 7.4 Related: 1448786 3.22.3-9 - Make sure reauthentication is run within the user session. Resolves:1448209 3.22.3-8 - Reap...

Sky Whale - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sky Whale published at the 'play' market has multiple vulnerabilities...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

No description provided by source. $Id: mswhalecheckforupdates.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Whale Communications e-Gap Security Appliance 2.5 Login Page Source Code Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9431/info The e-GAP appliance has been reported prone to a source code disclosure vulnerability. It has been reported that, when the affected appliance handles unexpected HTTP requests it may divulge the source code of th...

Businesses Remain Scared of Spear-Phishing as Attackers Study Behavior

Scared is a strong word, but the reality, according to a Websense analysis by Patrik Runald, is that spear-phishers, like the ones that compromised a White House network last week, are implementing new evasion tactics, fundamentally changing their attack strategies, and revolutionizing the target...

Google Books Whale Fail

Some years ago – never mind how long precisely– having little or no money in our pocket and nothing particular to interest us online, we went in search of some digitized copyright-free reading material, only to run smack into Google’s stylized, Eric-Carle inspired Whale Fail page. It tasks me! It...

Tumblr's Tumbeasts

Blogging site Tumblr recently made news with the introduction of its custom Tumbeasts cartoon, which received favorable write ups on Mashable.com and – wait for it – CNN when it was introduced earlier this month. The Tumbeasts, depicted ravaging Tumblr’s data center, were the creation of Oatmeal...

Welcome to the Zoo

Everybody knows the Twitter Fail Whale, but Twitter’s hardly the only flaky Web service out there, and the Fail Whale is just one creature in a whole Fail menagerie that’s sprung up in recent years to soothe hacked off Web users. Check out Threatpost’s Fail Zoo: a collection of the strangest fail...