CS-Cart < 4.4.2 XXE Vulnerability

CS-Cart is prone to an XML external entity XXE injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox Elevation of Privilege Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. An elevation of privilege vulnerability exists in Mozilla Firefox versions prior to 50, which stems from the fact that WebExtensions can use the mozAddonManager API, and can be exploited by...

[SECURITY] [DSA 3716-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3716-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 16, 2016 https://www.debian.org/security/faq -...

Mozilla: Addons update must verify IDs match between current and new versions (MFSA 2016-89, MFSA 2016-90)

A flaw was found in the way Add-on update process was handled by Firefox. A Man-in-the-Middle attacker could use this flaw to install a malicious signed add-on update...

CS-Cart 4.3.10 Unauthenticated XXE Injection

Software : CS-Cart From vendor site CS-Cart is an impressive platform for users to any level of eCommerce experience. With loads of features at a great price, CS-Cart is a great shopping cart solution that will quickly enable your online store to do business. XXE I : Twimgo addon...

CS-Cart 4.3.10 - XML External Entity Injection

Software : CS-Cart Ahmed sultan 0x4148 "; echo rawurlencodebase64encode$xml; ? change YOURHOST to your server address , use the output in the following POST request Action - HOST/cs-cart/index.php?dispatch=twigmo.post Data - action=addtocart&data=DATAOUTPUTHERE&format=xml a GET request will be se...

DSA-3716-1 firefox-esr - security update

Bulletin has no description...

Debian Security Advisory DSA 3716-1 (firefox-esr - security update)

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. Also, a man-in-the-middle attack in the addon update...

CS-Cart 4.3.10 - XML External Entity Injection Vulnerability

Exploit for php platform in category web applications Software : CS-Cart Ahmed sultan 0x4148 "; echo rawurlencodebase64encode$xml; ? change YOURHOST to your server address , use the output in the following POST request Action - HOST/cs-cart/index.php?dispatch=twigmo.post Data -...

[SECURITY] Fedora 23 Update: kf5-ktextwidgets-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 23 Update: kf5-kwidgetsaddons-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with various classes on top of QtWidgets...

[SECURITY] Fedora 23 Update: kf5-kjobwidgets-5.24.0-1.fc23

KDE Frameworks 5 Tier 2 addon for KJobs...

[SECURITY] Fedora 23 Update: kf5-karchive-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with archive functions...

[SECURITY] Fedora 24 Update: kf5-kitemmodels-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item models...

[SECURITY] Fedora 24 Update: kf5-threadweaver-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon for advanced thread management...

[SECURITY] Fedora 24 Update: kf5-kwidgetsaddons-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with various classes on top of QtWidgets...

FoxFi AddOn - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application FoxFi AddOn published at the 'play' market has multiple vulnerabilities...

Locus - addon GSAK Database - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Locus - addon GSAK Database published at the 'play' market has multiple vulnerabilities...

Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution

This protection will detect and block attempts to exploit this vulnerability...

Mozilla Firefox Add-on SDK Cross-Site Scripting Vulnerability

Mozilla Firefox is an open source web browser. A cross-site scripting vulnerability exists in the Mozilla Firefox Add-on SDK due to a failure of the program to properly handle the 'script: false' panel setting, which allows remote attackers to conduct cross-site scripting attacks using inline...