CVE-2016-0308

IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate background images...

CVE-2017-2611

Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes SECURITY-389. The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes that a...

Published application with XP compatibility mode enabled may cause intermittent black background

Published application with XP compatibility mode enabled may cause intermittent black background...

CVE-2016-10139

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltration are com.adups.fota and com.adups.fota.sysoper. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of...

October 27, 2016 — KB3197954 (OS Build 14393.351)

None None...

yiqicms system product-add.php has arbitrary file upload vulnerability

Yiqicms is the first marketing enterprise website system completely based on SEO-friendly development, using PHP+Mysql open source building system. Yiqicms 1.8 version of the background there are arbitrary file upload vulnerability. Allow attackers to exploit the vulnerability can upload any file...

Arbitrary Command Execution Vulnerability in GreenManager Web Application Firewall

NSFOCUS Web Application Firewall NSFOCUS Web Application Firewall, also known as Web Application Protection System, or WAF for short is a Web security product developed by Green Alliance. NSFOCUS Web Application Firewall has an arbitrary command execution vulnerability. Due to the WAF in the open...

PHPCMS V9 version of the background design flaws lead to arbitrary code execution vulnerability

Source link: http://www.cnbraid.com/ 0x01 background Since the default after installation requires Super administrator privileges, so the vulnerability is very tasteless, but the feeling should be in other cms, there are also, so the main share under the mining idea PS: using the test environment...

Finecms 2.0.1 background GETSHELL 0DAY-vulnerability warning-the black bar safety net

FineCMS have a cache function, and when the Wordpress like, there is a cache function and cache file name is not random and the suffix is php, it leads to a can use background cache function getshell it. Below is the Payload PHP | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 | POST /inde...

stash v1. 0. 3-background SQL injection

No description provided by source...

Unable to Delete Resources: There is currently an active background action

When attempting to delete hosting infrastructure either a Connection or Resources fromCitrix Studio, the following message appears: "Resources "Local storage" cannot be deleted because they are being used by the following Machine Catalogs and/or background actions:..." Background To avoid...

[SECURITY] Fedora 23 Update: kf5-kded-5.24.0-1.fc23

KDED stands for KDE Daemon which isn't very descriptive. KDED runs in the background and performs a number of small tasks. Some of these tasks are built in, others are started on demand. Custom KDED modules can be provided by 3rd party frameworks and applications...

[SECURITY] Fedora 24 Update: kf5-kded-5.24.0-1.fc24

KDED stands for KDE Daemon which isn't very descriptive. KDED runs in the background and performs a number of small tasks. Some of these tasks are built in, others are started on demand. Custom KDED modules can be provided by 3rd party frameworks and applications...

CVE-2016-3761

NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969...

UBUNTU-CVE-2016-3761

NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969...

The vulnerability of the Firefox browser, which allows a malicious actor to trigger a service failure

The Mozilla Firefox browser contains a vulnerability related to errors in class implementation. Exploiting this vulnerability allows a malicious actor to trigger a service failure for an application through the onbeforeunload event, causing JavaScript to run in the background...

The vulnerability of the Mozilla SeaMonkey software package, which allows a malicious individual to trigger a service failure

Mozilla SeaMonkey software contains a vulnerability related to class implementation errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure in an application through the onbeforeunload event, causing JavaScript to run in the background...

Windows BITS 'Notification' Feature Used to Deliver Malware

Attackers have found a new way to exploit the Widows Background Intelligent Transfer Service BITS which is being used to infect and reinfect targeted PCs with malware even after the initial infection has been removed. According to security researchers at Dell SecureWorks, attackers are exploiting...

ALPINE-CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

DEBIAN-CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...