CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500: Improper Neutralization of Input During Web Page Generation

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

PT-2018-12550

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the keyword parameter in the "manager/collect/collect vod zhuiju.php" endpoint. Recommendations For joyplus-cms version 1.6.0, avoi...

Google Denies Using Google Arts & Culture App to Collect Selfie Data

By Waqas Google Arts Culture App was recently introduced and its This is a post from HackRead.com Read the original post: Google Denies Using Google Arts Culture App to Collect Selfie Data...

CVE-2018-0108

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer files via an out-of-band XML External Entity XXE injection. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The...

Feedback Collect - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-090

This module enables you to add feedback forms and gather end user feedback, bug reports or any kind of suggestions. The module doesn't sufficiently filter output of its own fields under the scenario of creating or editing feedback-collect content types. This vulnerability is mitigated by the fact...

collect-world.com XSS vulnerability

Open Bug Bounty ID: OBB-448762 Description| Value ---|--- Affected Website:| collect-world.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Ocean CMS \admin\admin_collect.php page type parameter has SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollect.php page type parameter SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information and can...

CouchPotato: CIA Hacking Tool to Remotely Spy On Video Streams in Real-Time

After disclosing CIA's strategies to hijack and manipulate webcams and microphones to corrupt or delete recordings, WikiLeaks has now published another Vault 7 leak, revealing CIA's ability to spy on video streams remotely in real-time. Dubbed 'CouchPotato,' document leaked from the CIA details h...

JETCO Pay P2P Collect - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application JETCO Pay P2P Collect published at the 'play' market has multiple vulnerabilities...

SQL injection vulnerability in type parameter of Ocean CMS admin_collect_news.php page

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollectnews.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'type' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about...

SQL Injection Vulnerability in Ocean CMS uesMode Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admincollect.php page in the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'uesMode' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about t...

UBUNTU-CVE-2015-4177

The collectmounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service system crash by leveraging user-namespace root access for an MNTDETACH umount2 system...

Drive & Collect - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Drive & Collect published at the 'play' market has multiple vulnerabilities...

Snupps: Collect Organize Share - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Snupps: Collect Organize Share published at the 'play' market has multiple vulnerabilities...

Ubuntu: Security Advisory (USN-2840-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2829-2: Linux kernel (Vivid HWE) vulnerabilities

It was discovered that the SCTP protocol implementation in the Linux kernel performed an incorrect sequence of protocol-initialization steps. A local attacker could use this to cause a denial of service system crash. CVE-2015-5283 Dmitry Vyukov discovered that the Linux kernel's keyring handler...

PT-2016-3620

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.5 Description The issue is related to the collect mounts function in fs/namespace.c, which does not properly handle the case when it executes after a path has been unmounted. This allows local users with...

Splunk collect file Directory Traversal (CVE-2013-6771)

A directory traversal vulnerability has been found in Splunk. The vulnerability is due to insufficient sanitization of user-provided input to the advanced search functionality in the "file" parameter of the "collect" script...

CVE-2013-6771: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. dot dot in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the...