2677 matches found
openSUSE Security Update : roundcubemail (openSUSE-2016-1418)
This update for roundcubemail fixes the following issues : - A maliciously crafted email could cause untrusted code to be executed cross site scripting using $lt;area href=javascript:... boo982003, CVE-2016-5103 - Avoid HTML styles that could cause potential click jacking boo1001856 - A malicious...
Security update for roundcubemail (important)
roundcubemail was updated to version 1.1.7 and fixes the following issues: - Update to 1.1.7 A maliciously crafted FROM value could cause extra parameters to be passed to the sendmail command boo1012493 A maliciously crafted email could cause untrusted code to be executed cross site scripting usi...
Security update for roundcubemail (important)
This update for roundcubemail fixes the following issues: - A maliciously crafted email could cause untrusted code to be executed cross site scripting using $lt;area href=javascript:... boo982003, CVE-2016-5103 - Avoid HTML styles that could cause potential click jacking boo1001856 - A maliciousl...
Hackers Gamifies DDoS Attacks With Collaborative Platform
A Turkish hacking crew is luring participants to join its DDoS platform to compete with peers to earn redeemable points that are exchangeable for hacking tools and click-fraud software. The goal, security researchers say, is to “gamify” DDoS attacks in order to attract a critical mass of hackers...
Click 4 Rescue - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Click 4 Rescue published at the 'play' market has multiple vulnerabilities...
HackerOne: HackerOne Integrations Design Issue
Summary HackerOne Integrations Design Issue Description Include Impact This bug is similar to 170552. The HackerOne Integrations feature is very sensitive and can not be used with just a click, IMHO, or we can say "HackerOne users are a click away from giving to an attacker very sensitive...
The vulnerability of the Microsoft Office software package, which allows a hacker to bypass the ASLR protection mechanism
The vulnerability of the Click-to-Run package for Microsoft Office programs is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially created application...
Cross-site scripting vulnerability in Wordpress plugin adsense-click-fraud-monitoring
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. The Wordpress plugin adsense-click-fraud-monitoring has a cross-site scripting vulnerability due to the lack ...
Microsoft APP-V ASLR Information Disclosure Vulnerability
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in the Click-to-Run implementation in Microsoft Office...
Security feature bypass
The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...
CVE-2016-0137
The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...
September 6, 2016, update for Office 2016 (KB3115276)
None None...
Legal Robot: Click Jacking
Hey legalRobot! I have found Click Jacking type of Vulnerability in your Website Now The Question is What is Click Jacking. Click Jacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what...
1c-bitrix.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-175847 Description| Value ---|--- Affected Website:| 1c-bitrix.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...
August 9, 2016 — KB3176495 (OS Build 14393.51)
None None...
SoakSoak Botnet Pushing Neutrino Exploit Kit and CryptXXX Ransomware
Researchers are reporting a surge in CryptXXX ransomware infections delivered via business websites compromised to redirect to the Neutrino Exploit Kit. Attackers are targeting websites running the Revslider slideshow plugin for WordPress, according to a report released Tuesday by Invincea. Behin...
IBM Jazz Reporting Service (JRS) Clickjacking Vulnerability
IBM Jazz Reporting Service is an optional component of IBM Rational Reporting for Development Intelligence. IBM Jazz Reporting Service JRS has a security vulnerability in the Report Builder and Data Collection Component DCC implementations. A remote attacker could exploit this vulnerability to...
The vulnerability of the Opera browser allows a malicious actor to execute arbitrary code by double-clicking on a pop-up window.
The Opera browser contains a vulnerability related to the use of double-clicking on pop-up windows. This allows a malicious individual to create a pop-up window. With the first click on the window, an additional form appears in the address bar, and with a second click on that form, arbitrary code...
Chinese Ad Firm Infected 85 Million Android Users to Get More Clicks
An Android-based malware campaign has been found to control as many as 85 million Android devices globally and is making its gang an estimated $300,000 per month in fraudulent ad revenue. A Chinese advertising company called Yingmob is responsible for distributing the malware on a massive scale a...
FantasyTote: Stored number of clicks in the Deposits button
Hi, i have found a cache issue that your system store the number of clicks at the Deposits button. You can click the Deposits button more than one time and the amount will by multiplied by the number of clicks . I have attacked the poc . Thanks...