CVE-2017-2215

The CVE-2017-2215 entry concerns the Installer for the National Tax Agency’s "Setup file of advance preparation" (jizen_setup.exe). Connected sources confirm an untrusted DLL search path vulnerability in the installer, which could allow arbitrary code execution with the privileges of the invoking...

CVE-2017-2215

Untrusted search path vulnerability in Installer of "Setup file of advance preparation" jizensetup.exe The version which was available on the website prior to 2017 June 12 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

advancetabco.com XSS vulnerability

Vulnerable URL: https://www.advancetabco.com/scullerysinks.asp?title=1"...

Installer of "Setup file of advance preparation" may insecurely load Dinamic Link Libraries

Overview "Setup file of advance preparation" provided by National Tax Agency is software to setup the environment which is required to use "filing assistance on the NTA website". "Setup file of advance preparation"contains an issue with the DLL search path, which may lead to insecurely loading...

Hot on the Credential Theft Trail: Tracking a Hacker from a Dropbox Phishing Campaign

We the Imperva Defense Center research team frequently investigate cases of credential theft to gain a deeper understanding of methods and tools used by cyber criminals—in particular, to learn how accounts are taken over once credentials are compromised through phishing campaigns. We recently cho...

Advance SMS - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Advance SMS published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Linux operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the pipeadvance function in the Linux operating system is related to a unit that is not properly accounted for. Exploiting this vulnerability can allow an attacker to obtain confidential information...

CVE-2017-5550

Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision...

CVE-2017-5550

Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision...

CVE-2016-10138

An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute t...

Input validation

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

CVE-2016-10135

Technical details for CVE-2016-10135 are not publicly provided in the supplied documents; monitor for updates as connected sources do not reveal affected components or remediation.

CVE-2016-10135

An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...

CVE-2016-10138

An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute t...

CVE-2016-10138

CVE-2016-10138 affects BLU Advance 5.0 and BLU R1 HD running Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and sets android:sharedUserId to android.uid.system, causing it to run as the system user. It exposes an exported broadcast receiver (com.adups.fota.sy...

Shopify: Redirect in adding advance cash on delivery app

Hello, When you install Advance Cash on delivery App in your shop, it takes you to the url F140362 https://.myshopify.com/admin/authorizegateway/1041328?apikey=ceb1a596e2b039d02dfb5772303f6273&returnurl=https://cod.shopifyapps.com/gatewayenabled F140363 Here, returnurl can be used for redirection...

Advance MLM Script SQL Injection

x========================================================================================================================================x | Title : Advance MLM Script SQL Vulnerabilities | Software : Advance MLM Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Advance MLM Script - SQL Injection

x========================================================================================================================================x | Title : Advance MLM Script SQL Vulnerabilities | Software : Advance MLM Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Advance MLM Script - SQL Injection

Advance MLM Script - SQL Injection x========================================================================================================================================x | Title : Advance MLM Script SQL Vulnerabilities | Software : Advance MLM Script | Vendor : http://www.i-netsolution.com/ |...

Local Privilege Bypass Vulnerability in Various HP Products

HP is a U.S.-based information technology company that specializes in printers, digital imaging, software, computers and information services. A local privilege bypass vulnerability exists in HP XP7 Command View Advance Edition Suite CVAE Replication Manager and Device Manager, which could allow ...