Magento Community Edition and Enterprise Edition Cross-Site Request Forgery Vulnerability

Magento is an open source PHP e-commerce system from Magento Inc. that provides rights management, search engine, and payment gateway.Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A cross-site request forgery vulnerability exists in...

Daniel Miessler on My Writings about IoT Security

Daniel Miessler criticizes my writings about IoT security: I know it's super cool to scream about how IoT is insecure, how it's dumb to hook up everyday objects like houses and cars and locks to the internet, how bad things can get, and I know it's fun to be invited to talk about how everything i...

Happy 15th Birthday TaoSecurity Blog

Today, 8 January 2018, is the 15th birthday of TaoSecurity Blog! This is also my 3,020th blog post. I wrote my first post on 8 January 2003 while working as an incident response consultant for Foundstone. I don't believe I've released statistics for the blog before, so here are a few. Blogger...

sampledesignbook90.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-485076 Description| Value ---|--- Affected Website:| sampledesignbook90.godo.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

Library CMS 1.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Library CMS - Powerful Book Management System - xss Google Dork: N/A Date: 2017/27/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: http://kaasoft.pro/ Software Buy:...

[SECURITY] Fedora 27 Update: roundcubemail-1.3.3-1.fc27

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 26 Update: roundcubemail-1.3.3-1.fc26

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Design/Logic Flaw

Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10888

BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors...

CVE-2017-10888

BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors...

CVE-2017-10887

Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10887

Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10888

CVE-2017-10888 affects BOOK WALKER for Windows (v1.2.9 and earlier) and Mac (v1.2.5 and earlier). The connected documents describe an information-disclosure vulnerability (CWE-200) that may allow an attacker to access local files, via unspecified vectors, on these platforms. The underlying issue ...

CVE-2017-10887

CVE-2017-10887 is a DLL preloading (untrusted search path) vulnerability in BOOK WALKER for Windows (≤ v1.2.9). The installer can load a Trojan horse DLL from an unspecified directory, enabling arbitrary code execution with the user’s privileges prior to installation. Affected products are BOOK W...

CVE-2017-10887

Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10888

BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors...

BOOK WALKER Information Disclosure Vulnerability

BOOK WALKER for Windows and BOOK WALKER for Mac are both products of BOOK WALKER, a Japanese company. BOOK WALKER for Windows is a set of e-book software based on the Windows platform.BOOK WALKER for Mac is a set of e-book software based on the Mac platform. BOOK WALKER for Mac is a set of e-book...

BOOK WALKER Untrusted Search Path Vulnerability

BOOK WALKER for Windows is a set of Windows-based e-book software from BOOK WALKER Japan. An untrusted search path vulnerability exists in BOOK WALKER 1.2.9 and earlier versions for Windows. The vulnerability can be exploited by an attacker to gain privileges through a malicious DLL in the...

SQL Injection Vulnerability in EML Enterprise Address Book Management System action.link.php file

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. A SQL injection vulnerability exists in the EML Enterprise Contact Management System action.link.php file. An attacker can exploit this...

JVN#18420340: Multiple vulnerabilities in BOOK WALKER for Windows/Mac

BOOK WALKER for Windows/Mac provided by BOOK WALKER Co.,Ltd. are applications to view e-books. Installer of BOOK WALKER for Windows contains a vulnerabirity, which may lead to insecurely loading Dynamic Link Libraries. Also BOOK WALKER for Windows/Mac contain a vulnerability which may lead to...