HP Support Assistant Security Bypass Vulnerability

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 8.1.52.1. A remote attacker could exploit the vulnerability to bypass...

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

Authentication flaw

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2016-2245

HP Support Assistant prior to 8.1.52.1 contains an authentication bypass vulnerability (CVE-2016-2245). Remote attackers could bypass authentication via unspecified vectors. Impact per sources indicates high confidentiality/integrity/availability concerns (CVSS v3 base score 9.8, critical). HP ha...

HPSBGN03438 rev.2 - HP Support Assistant, Local Authentication Bypass

Potential Security Impact Authentication Bypass Source: Hewlett­Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Support Assistant. This vulnerability could be exploited locally to allow authentication bypass...

Greenbone Networks Greenbone Security Assistant charts module cross-site scripting vulnerability

Greenbone Networks Greenbone Security Assistant GSA is a web interface that provides access to the OpenVAS service layer. charts is one of the charting modules. The charts module/opm URI in the Greenbone Networks GSA fails to adequately filter the 'aggregatetype' parameter in the getaggregat...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

Cross site scripting

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

CVE-2016-1926

The CVE-2016-1926 entry concerns Greenbone Security Assistant (GSA) 6.x up to 6.0.8, where the charts module is vulnerable to cross-site scripting (XSS). The flaw is caused by insufficient input sanitization on the aggregate_type parameter used by the get_aggregate command to omp, enabling a remo...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

link-assistant.com XSS vulnerability

Open Bug Bounty ID: OBB-123062 Description| Value ---|--- Affected Website:| link-assistant.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

金山手机助手服务权限提升漏洞

No description provided by source...

3 6 0 Cheap Shot: a wormhole vulnerability“DimensionDoor”exposure-vulnerability warning-the black bar safety net

3 6 0 mobile assistant security team about this response: 1, The paper analysis the 3. 1. 5 5 3 6 0 mobile assistant 2 0 1 4 year-old version, the current official version and the beta version are not present the remote port is a security risk. 2, the 3 6 0 mobile assistant APK download will pop-...

Kingsoft Mobile Assistant Service Privilege Elevation Vulnerability

Kingsoft Mobile Assistant is the official cell phone resources access platform launched by Kingsoft, Kingsoft Mobile Assistant, formerly known as Kingsoft Mobile Control, can provide cell phone users with a huge number of applications to download, wonderful games, useful software, beautiful...

Scan of Internet for Compromised Cisco Routers Finds Fewer Than 100

A day after researchers detailed a technique that attackers are using to upload malicious firmware images to Cisco routers, academic researchers say they have scanned the entire IPv4 address space and discovered a total of 79 likely compromised routers. The researchers at the University of Michig...

Greenbone Security Assistant (GSA) Default Credentials (HTTP)

The remote Greenbone Security Assistant GSA is installed / configured in a way that it has accounts with default passwords enabled. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Facebook M: Facebook's Answer to Siri, Cortana and Google Now

Microsoft's 'Cortana', Google's 'Google Now', Apple's 'Siri', Now meet Facebook's 'M.' Facebook's announcement to introduce their Personal Digital Assistant “M” comes with powers within the Facebook Messenger. It is a similar virtual assistant like Google Now, Apple's Siri and Microsoft's smart...