[SECURITY] Fedora 24 Update: drupal7-theme-zen-5.6-1.fc24

Zen is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. If you are building your own standards-compliant theme, you will find it much easier to start with Zen than to start with Garland or Stark. This theme has fantastic online documentation...

Zen Cart 'admin_account.php' Remote Elevation of Privilege Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . A remote elevation of privilege vulnerability exists in Zen Cart 'adminaccount.php', which allows remote attackers to submit a special period request to gain privileges...

Multiple Cross-Site Scripting Vulnerabilities in Zen Cart

Zen Cart is Zen Cart team developed an open source shopping cart system . Multiple cross-site scripting vulnerabilities exist in Zen Cart 1.5.4 and previous versions. An attacker can exploit this vulnerability to execute arbitrary script code, steal cookie-based authentication and launch other...

Zen Cart Information Disclosure Vulnerability

Zen Cart is Zen Cart team developed an open source shopping cart system . An information disclosure vulnerability exists in Zen Cart 1.5.4 and prior versions. An attacker can exploit this vulnerability to obtain sensitive information...

Zen Studio: Finger Painting - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zen Studio: Finger Painting published at the 'play' market has multiple vulnerabilities...

Zen Hanoi - Puzzle Towers Game - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Zen Hanoi - Puzzle Towers Game published at the 'play' market has multiple vulnerabilities...

Zen Pinball - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zen Pinball published at the 'play' market has multiple vulnerabilities...

The Line Zen - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Line Zen published at the 'play' market has multiple vulnerabilities...

AVG Zen – Protect more devices - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AVG Zen – Protect more devices published at the 'play' market has multiple vulnerabilities...

Chrome Zen Therapy - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Chrome Zen Therapy published at the 'play' market has multiple vulnerabilities...

Zen Cart Shopping Cart App Plugs Big XSS Vulnerability

Popular open source shopping cart app Zen Cart is warning its users of dozens of cross-site scripting vulnerabilities found in its software. Affected websites, security experts say, risk exposing customers to malware, theft of cookies data and site defacement. Researchers at the security firm...

zen-cart.com XSS vulnerability

Vulnerable URL: http://www.zen-cart.com/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 04.04.2016 Latest check for patch:| 04.04.2016 11:23 GMT Vulnerability type:| XSS Vulnerabili...

Zen Cart 1.5.4 - Local File Inclusion

Advisory ID: HTB23282 Product: Zen Cart Vendor: Zen Ventures, LLC Vulnerable Versions: 1.5.4 Tested Version: 1.5.4 Advisory Publication: November 25, 2015 without technical details Vendor Notification: November 25, 2015 Vendor Patch: November 26, 2015 Public Disclosure: December 16, 2015...

Zen Cart 1.5.4 - Local File Inclusion

Zen Cart 1.5.4 - Local File Inclusion Advisory ID: HTB23282 Product: Zen Cart Vendor: Zen Ventures, LLC Vulnerable Versions: 1.5.4 Tested Version: 1.5.4 Advisory Publication: November 25, 2015 without technical details Vendor Notification: November 25, 2015 Vendor Patch: November 26, 2015 Public...

Zen Cart 1.5.4 Local File Inclusion

Advisory ID: HTB23282 Product: Zen Cart Vendor: Zen Ventures, LLC Vulnerable Versions: 1.5.4 Tested Version: 1.5.4 Advisory Publication: November 25, 2015 without technical details Vendor Notification: November 25, 2015 Vendor Patch: November 26, 2015 Public Disclosure: December 16, 2015...

Zen Cart 1.5.4 Local File Inclusion Vulnerability

Zen Cart version 1.5.4 suffers from a local file inclusion vulnerability. Product: Zen Cart Vendor: Zen Ventures, LLC Vulnerable Versions: 1.5.4 Tested Version: 1.5.4 Advisory Publication: November 25, 2015 without technical details Vendor Notification: November 25, 2015 Vendor Patch: November 26...

Zen Cart Arbitrary File Inclusion Vulnerability

Zen Cart is open source shopping cart software. An arbitrary file inclusion vulnerability exists in Zen Cart. Due to a lack of filtering in the "/ajax.php" script directory traversal sequence in the "act" HTTP GET parameter, an attacker can exploit the vulnerability to execute arbitrary PHP code...

Zen Cart 1.5.4 LFI

Local file include vulnerability in Zen Cart ajax.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

RCE in Zen Cart via Arbitrary File Inclusion

High-Tech Bridge Security Research Lab discovered critical vulnerability in a popular e-commerce software Zen Cart, which can be exploited by remote non-authenticated attackers to compromise vulnerable system. A remote unauthenticated attacker might be able to execute arbitrary PHP code on the...

Zen Cart 1.5.4 Code Execution / Information Disclosure

Zen Cart 1.5.4: Code Execution and Information Leak Security Advisory – Curesec Research Team 1. Introduction Affected Product: Zen Cart 1.5.4 Fixed in: partial fix via patch Partial Patch Link: https://www.zen-cart.com/showthread.php?218239-curesec-security-report-Patch-Included Vendor Contact:...