3437 matches found
PT-2014-4618
Name of the Vulnerable Software and Affected Versions Thank You Counter Button plugin version 1.8.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via the thanks caption, thanks caption style, or thanks style parameter to "wp-admin/options.php". This can lead...
CVE-2014-0861
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is no...
Cross site scripting
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is no...
CVE-2014-0861
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is no...
PT-2014-3899
Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 Description A cross-site scripting XSS issue exists due to improper handling of an unspecified...
CVE-2014-0861: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is no...
Confirmed: Samsung Galaxy S5 has a Fingerprint Scanner
After the huge success of Samsung galaxy S3, Samsung Galaxy S4 and Samsung Tablets, the world’s most successful Android manufacturer is going to reveal its brand new Smartphone Samsung Galaxy S5 next week at Mobile World. Early in 2014, rumors suggested that Samsung Galaxy S5 will have Fingerprin...
Fedora 20 : ikiwiki-3.20140125-1.fc20 (2014-1747)
Update to the latest stable version. Changes in ikiwiki 3.20140125 : - inline: Allow overriding the title of the feed. Closes: http://bugs.debian.org/735123 Thanks, Christophe Rhodes - osm: Escape name parameter. Closes: http://bugs.debian.org/731797 Changes in ikiwiki 3.20140102 : - aggregate:...
HackerOne: LinkedIN URL should be HTTPS
Not really a security bug, but I think will be a good idea to add HTTPS on LinkedIN Share Button. Example page In the right side of page: https://hackerone.com/reports/547 LinkedIN redirect to HTTPS after click, but cookie is sent on the network before that. Thanks!...
Chrome Pop-Up Warns Windows Users of Browser Hijacking
A rising number of online scams involve the modification of browser settings where a hacker spikes a free download or website with malware. The end result is generally a click-fraud scheme of some kind where the new browser settings might include spiked search engine pages or a new home page...
CVE-2013-6005
Cross-site scripting XSS vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button...
Cross site scripting
Cross-site scripting XSS vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button...
CVE-2013-6005
Cross-site scripting XSS vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button...
CVE-2013-6005: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button...
PT-2013-5916
Name of the Vulnerable Software and Affected Versions Cybozu Dezie versions prior to 8.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button. Recommendations For versions prior to 8.1.0, update to...
Password reset emails are unusable on Outlook Web Access
When viewing a requested password reset email in Outlook webmail a user cannot see the button representing the main required action. Screenshot attached shows text highlighted to better demonstrate the issue White text on White background. Probably an Outlook issue but I think there might be...
PT-2013-5390
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.0.3 Description The issue allows physically proximate attackers to bypass the passcode requirement and dial arbitrary telephone numbers on iPhone devices. This is achieved by tapping the emergency-call button duri...
CVE-2013-5144: Undefined Security Weakness
Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by tapping the emergency-call button during a certain notification and camera-pane state to trigger a NULL pointer...
Another iPhone lockscreen bypass vulnerability found in iOS 7.02
Here we go again! Earlier this week, Apple released iOS 7.0.2 just to fix some Lockscreen bugs in iOS 7 and but a researcher has found a new Lockscreen bug in new iOS 7.0.2. This new Lockscreen bug is found by Dany Lisiansky, and he uploaded a proof of concept video on YouTube with the complete...
PT-2013-5405
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.0.2 Description The issue allows physically proximate attackers to bypass the passcode requirement and dial arbitrary telephone numbers by making a series of taps of the emergency-call button, triggering a NULL...