CVE-2016-8580

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes...

chat.mirrorbingo.com XSS vulnerability

Vulnerable URL: https://chat.mirrorbingo.com/chatweb/conf/trinitymirrortrinitymirror/widget?lang=%27/prompt%28%27OPENBUGBOUNTY%27%29/%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

Coinbase: Information disclosure of user by email using buy widget

In the Coinbase Buy Widget flow, we were displaying the last 4 digits of a user's phone number for verification purposes e.g. "we've send a code to xxx-1234". Industry standard seems to be 2 digits instead of 4, so we now mask all but the last 2 digits...

PT-2020-6949 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix versions 3.0.0 through 3.0.32rc1 Zabbix versions 4.0.0 through 4.0.22rc1 Zabbix versions 4.1.x through 4.4.x before 4.4.10rc1 Zabbix versions 5.x before 5.0.2rc1 Description: The issue is related to the lack of protection of the web pa...

chromium-browser: universal xss in blink

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

CVE-2016-5148

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

Cross site scripting

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

Calendar Widget: Month - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget: Month published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2016-5148

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

CVE-2016-5148

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

zomato.com XSS vulnerability

Vulnerable URL: https://www.zomato.com/widgets/urbanspoonmigratedwidgets.php?case=olikeitresid=17467370"'/;a=eval;b=alert;ab/XSSPOSED/;...

URL Widget - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application URL Widget published at the 'play' market has multiple vulnerabilities...

meteo.be XSS vulnerability

Vulnerable URL: http://www.meteo.be/services/widget/?postcode=1180famfp"prpkn=2=10〈=fr Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18134 VIP website status:| Yes Check meteo.be...

Wordpress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion

No description provided by source...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the RenderWidgetHostImpl::Destroy function located in the content/browser/rendererhost/renderwidgethostimpl.cc file of the Google Chrome browser’s Navigation implementation is related to the use of memory after it is released. Exploiting this vulnerability could allow a remot...

Flashlight Widget - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Flashlight Widget published at the 'play' market has multiple vulnerabilities...

Battery Widget (Charge Level) - Customized SSL, Redefined SSL Common Names verifier, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Battery Widget Charge Level published at the 'play' market has multiple vulnerabilities...

Calendar Widget Month + Agenda - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget Month + Agenda published at the 'play' market has multiple vulnerabilities...

Digital Clock Widget Xperia - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Digital Clock Widget Xperia published at the 'play' market has multiple vulnerabilities...

Calendar Widget: Month+Agenda - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget: Month+Agenda published at the 'play' market has multiple vulnerabilities...