CVE-2017-8833

Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...

CVE-2017-8833

Zen Cart 1.6.0 (development version) contains a cross-site scripting (XSS) flaw in the main_page parameter of index.php. The vulnerability stems from insufficient sanitization of input to the main_page parameter, allowing injection of arbitrary script/HTML. Public references indicate 1.6.0 is in-...

CVE-2017-8833

Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...

[ASA-201703-13] linux-zen: privilege escalation

Arch Linux Security Advisory ASA-201703-13 ========================================== Severity: High Date : 2017-03-16 CVE-ID : CVE-2017-2636 Package : linux-zen Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-203 Summary ======= The package linux-zen before...

[ASA-201702-18] linux-zen: multiple issues

Arch Linux Security Advisory ASA-201702-18 ========================================== Severity: High Date : 2017-02-22 CVE-ID : CVE-2016-10088 CVE-2016-9588 CVE-2017-5986 CVE-2017-6074 Package : linux-zen Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-186 Summary...

Cicada-known CMS v5. 6 system/module/cart/control.php add function SQL injection vulnerability

Zen known in passing parameters when not directly global protection, but the first call of a dao class, that is, Zen is known the database connection class, and then call one of the quoteto escape. / On the field plus escape. Quote a var. @param mixed $value @access public @return mixed / public...

[ASA-201701-38] linux-zen: privilege escalation

Arch Linux Security Advisory ASA-201701-38 ========================================== Severity: Medium Date : 2017-01-29 CVE-ID : CVE-2017-2583 Package : linux-zen Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-151 Summary ======= The package linux-zen before...

[ASA-201612-14] linux-zen: denial of service

Arch Linux Security Advisory ASA-201612-14 ========================================== Severity: High Date : 2016-12-12 CVE-ID : CVE-2016-9919 Package : linux-zen Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package linux-zen before...

Researchers Question Security in AMD's Upcoming Zen Chips

As more computing heads to the clouds, security researchers are questioning the security of virtual machine control panels called hypervisors. One of the first hardware-based solutions to address these concerns will be deployed by chip manufacturer AMD, called Secure Encrypted Virtualization. The...

Fedora Update for drupal7-theme-zen FEDORA-2016-fef6925d48

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal7-theme-zen FEDORA-2016-5696f9fbe1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : drupal7-theme-zen (2016-5696f9fbe1)

7.x-5.6 - 7.x-5.5 - SA-CONTRIB-2014-047 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : drupal7-theme-zen (2016-fef6925d48)

7.x-5.6 - 7.x-5.5 - SA-CONTRIB-2014-047 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 23 Update: drupal7-theme-zen-5.6-1.fc23

Zen is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. If you are building your own standards-compliant theme, you will find it much easier to start with Zen than to start with Garland or Stark. This theme has fantastic online documentation...

[SECURITY] Fedora 24 Update: drupal7-theme-zen-5.6-1.fc24

Zen is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. If you are building your own standards-compliant theme, you will find it much easier to start with Zen than to start with Garland or Stark. This theme has fantastic online documentation...

Zen Cart 'admin_account.php' Remote Elevation of Privilege Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . A remote elevation of privilege vulnerability exists in Zen Cart 'adminaccount.php', which allows remote attackers to submit a special period request to gain privileges...

Zen Cart Information Disclosure Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . An information disclosure vulnerability exists in Zen Cart 1.5.4 and prior versions. An attacker can exploit this vulnerability to obtain sensitive information...

Multiple Cross-Site Scripting Vulnerabilities in Zen Cart

Zen Cart is Zen Cart team developed an open source shopping cart system . Multiple cross-site scripting vulnerabilities exist in Zen Cart 1.5.4 and previous versions. An attacker can exploit this vulnerability to execute arbitrary script code, steal cookie-based authentication and launch other...

Zen Studio: Finger Painting - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zen Studio: Finger Painting published at the 'play' market has multiple vulnerabilities...

Zen Hanoi - Puzzle Towers Game - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Zen Hanoi - Puzzle Towers Game published at the 'play' market has multiple vulnerabilities...