[SECURITY] Fedora 34 Update: gnome-shell-extension-background-logo-40.0~rc-1.fc34

Show your pride! Display the Fedora logo or any other graphic in the corn er of your desktop...

[SECURITY] Fedora 34 Update: gnome-control-center-40~rc-1.fc34

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

[SECURITY] Fedora 34 Update: gnome-backgrounds-40~rc-1.fc34

The gnome-backgrounds package contains the default desktop background, known as the Adwaita background, for the GNOME Desktop version...

Fedora: Security Advisory for gnome-shell-extension-background-logo (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for gnome-control-center (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-25278

FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor...

Design/Logic Flaw

FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor...

CVE-2021-25278

The FTAPI vulnerability CVE-2021-25278 affects FTAPI versions 4.0–4.10 and is a cross-site scripting flaw in the Background Image upload feature of the Submit Box Template Editor. An attacker can exploit the issue by uploading an SVG file containing embedded JavaScript, which may compromise a vic...

Rafel-Rat - Android Rat Written In Java With WebPanel For Controlling Victims

Rafel is RemoteAccess Tool Used to Control Victims Using WebPanel With More Advance Features. Main Features Admin Permission Add App To White List Looks Like Browser Runs In Background Even App is ClosedMay not work on some Devices Accessibility Feature Support Android v5 - v10 No Port Forwarding...

FTAPI SecuTransfer 跨站脚本漏洞

FTAPI is an end-to-end encrypted file transfer and data room solution with unlimited file size. A cross-site scripting vulnerability exists in the "Background Image" upload function in the "Submit Box Template Editor" in FTAPI 4.0 - 4.10. An attacker can exploit this vulnerability by uploading an...

Friday Squid Blogging: On SQUIDS

A good tutorial: But we can go beyond the polarization of electrons and really leverage the electron waviness. By interleaving thin layers of superconducting and normal materials, we can make the quantum electronic equivalents of transistors and diodes such as Superconducting Tunnel Junctions SJT...

Wenzhou Orange Tree Network Technology Co., Ltd. station building system has unauthorized access vulnerabilities

Wenzhou Orange Tree Network Technology Co., Ltd. is a foreign trade marketing consulting services company, focusing on search engine keyword advertising, search engine optimization SEO technology, search engine marketing SEM consulting and optimized for the search engine website construction...

CVE-2021-0390

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User...

SQL Injection Vulnerability in the Background of DAS System for Online Monitoring of Key Pollution Sources

Sichuan Qinghe Technology Co., Ltd. was registered on April 9, 2007 in Chengdu High-tech Industrial and Commercial Bureau. Legal representative Li Jian, the company's scope of business includes computer hardware and software development, sales; monitoring equipment installation, sales and so on...

Microsoft Windows Local Background Handler Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows local background processor. The following products and versions are affected: Windows Server, version 20H2...

Chemex has a background file upload vulnerability

Coffee Pot Chemex is a free, open source, efficient and beautiful IT operations management platform. Chemex suffers from a background file upload vulnerability that can be exploited by an attacker to gain control of the server...

CS Money: Able to upload backgrounds before entering 2FA

Summary: Hi Team, I am able to see and use uploaded backgrounds and able to upload new ones without proper authentication of 2FA. I hope you remember this report 993786. Steps To Reproduce: 1. Login with a steam account and enable 2FA. 1. Now logout your account. Clear all the cookies. 1. Now aga...

Unauthorized access vulnerability in S-CMS enterprise website building system (CNVD-2021-00044)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is an unauthorized access vulnerability in S-CMS, which can be exploited by an attacker to gain administrator privileges witho...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through heap buffer overflow in background fetch that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SQL injection vulnerability in UCMS background ai***.php file

UCMS is a content management system written in PHP. A SQL injection vulnerability exists in the ai.php file in the background of UCMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...