115 matches found
CVE-2015-9430: Improper Neutralization of Input During Web Page Generation
The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header...
PT-2019-7389
Name of the Vulnerable Software and Affected Versions crazy-bone plugin versions prior to 0.6.0 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability, which occurs via the User-Agent HTTP header. This allows for potential malicious script injection, affecting...
CVE-2018-10491
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-10491
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-10491
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-10491: Out-of-bounds Write
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
PT-2018-9912
Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.0.0.29935 Description: This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...
Foxit Reader U3D Bone Weight Modifier Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...
Justine Bone on St. Jude Vulnerabilities and Medical Device Security
MedSec CEO Justine Bone talks to Mike Mimoso about the St. Jude Medical vulnerabilities, the considerations her company and Muddy Waters made in short selling St. Jude stock, and the current state of medical device security. Download: JustineBoneonSt.JudeVulnerabilitiesandMedicalDeviceSecurity.mp...
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005
Description Inconsistent name for term access query Less critical - Drupal 7 and Drupal 8 Drupal provides a mechanism to alter database SELECT queries before they are executed. Contributed and custom modules may use this mechanism to restrict access to certain entities by implementing...
[SECURITY] Fedora 23 Update: cryptobone-1.0.5-1.fc23
The Crypto Bone is a secure messaging system that makes sure a user's email is always encrypted without burdening the user with the message key management. Based on a GUI and a separate daemon, both ease-of-use and security are assured by a novel approach to encryption key management. While the...
[SECURITY] Fedora 24 Update: cryptobone-1.0.5-1.fc24
The Crypto Bone is a secure messaging system that makes sure a user's email is always encrypted without burdening the user with the message key management. Based on a GUI and a separate daemon, both ease-of-use and security are assured by a novel approach to encryption key management. While the...
Bone Doctor Leg Surgery - Dynamic Code Loading, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Bone Doctor Leg Surgery published at the 'play' market has multiple vulnerabilities...
Crazy Bone <= 0.5.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
The Crazy Bone WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability...
