JW Daily Text Reminder - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application JW Daily Text Reminder published at the 'play' market has multiple vulnerabilities...

Daily Text - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Daily Text published at the 'play' market has multiple vulnerabilities...

Daily Text 2016 - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Daily Text 2016 published at the 'play' market has multiple vulnerabilities...

Daily Mail Unvalidated Redirect / Cross Site Scripting

Daily Mail Registration Page Unvalidated Redirects and Forwards & XSS Web Security Problem Website Description: "The Daily Mail is a British daily middle-market tabloid newspaper owned by the Daily Mail and General Trust. First published in 1896 by Lord Northcliffe, it is the United Kingdom's...

dailyrecord.co.uk XSS vulnerability

Vulnerable URL: http://www.dailyrecord.co.uk/whats-on/scotland/%22%3E%3Csvg-onload%3Dprompt%28-XSSPOSED-%29%3E/anytime/?query=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:57 GMT...

sportsbusinessdaily.com XSS vulnerability

Vulnerable URL: http://www.sportsbusinessdaily.com/Search/SBJ-Articles.aspx?q=x=AnyWord=20150810-2015080304956";prompt/XSSPOSED/// Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

daily-menu.ru XSS vulnerability

Vulnerable URL: http://daily-menu.ru/dailymenu/recipes/search?query=37" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1875288 Google Pagerank| 0 VIP...

Exploit Database Git Repository

Exploit Database Git Repository The Exploit Database is an archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. Its aim is to serve as the most comprehensive collection of exploits gathered through direct...

Angler Exploit Kit, Bedep Malware Inflating Video Views

A new sort of hacktivism emerged last week when experts from Trustwave published new research revealing that attackers are using the Angler exploit kit and the Bedep Trojan in order to drive artificial views to politically controversial videos. The motivation for the scheme, it appears, is to...

WordPress Daily Edition Theme Full Path Information Disclosure Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress Daily Edition theme version 1.6.7 suffers from an information disclosure vulnerability in the implementation, which allows attackers to exploit this...

WordPress Daily Edition Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Daily Edition Theme is a theme plugin for wordpress. WordPress Daily Edition Theme fiche-disque.php...

WordPress Daily Edition Theme Unauthorized Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Daily Edition Theme is a theme plugin for wordpress. WordPress Daily Edition Theme thumb.php fails t...

WordPress Daily Edition Theme SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Daily Edition Theme is a theme plugin for wordpress. WordPress Daily Edition Theme "fiche-disque.php...

Ubuntu Vivid logrotation script local elevation of privilege vulnerability

Ubuntu Vivid is a linux-based distribution. A security vulnerability in the logrotation script /etc/cron.daily/upstart in Ubuntu Vivid Ubuntu Upstart allows local attackers to execute commands with elevated privileges...

WordPress Daily Edition Theme 1.6.2 Cross Site Scripting

WordPress Daily Edition Theme v1.6.2 XSS Cross-site Scripting Security Vulnerabilities Exploit Title: WordPress Daily Edition Theme /fiche-disque.php id Parameters XSS Security Vulnerabilities Product: WordPress Daily Edition Theme Vendor: WooThemes Vulnerable Versions: v1.6. v1.5. v1.4. v1.3...

WooThemes Daily Edition <= 1.6.2 - Cross-Site Scripting (XSS)

According to the original advisory "The code programming flaw occurs at 'fiche-disque.php?' page with 'id' parameters."...

WooThemes Daily Edition <= 1.6.2 - SQL Injection

According to the researcher, "The code flaw occurs at 'fiche-disque.php?' page with '' parameter."...

WordPress Daily Edition 1.6.2 File Upload

WordPress Daily Edition Theme v1.6.2 Unrestricted Upload of File Security Vulnerabilities Exploit Title: WordPress Daily Edition Theme v1.6.2 /thumb.php src Parameter Unrestricted Upload of File Security Vulnerabilities Product: WordPress Daily Edition Theme Vendor: WooThemes Vulnerable Versions:...

WordPress Daily Edition 1.6.2 SQL Injection

WordPress Daily Edition Theme v1.6.2 SQL Injection Security Vulnerabilities Exploit Title: WordPress Daily Edition Theme v1.6.2 /fiche-disque.php id Parameters SQL Injection Security Vulnerabilities Product: WordPress Daily Edition Theme Vendor: WooThemes Vulnerable Versions: v1.6.2 Tested Versio...

Fedora 21 : php-horde-kronolith-4.2.4-1.fc21 (2014-16329)

kronolith 4.2.4 - jan Make access to non-CalDAV remote calendars faster Bug 12379. - jan Continue with further events if parsing of one remote event date fails. - jan Fix JS error in month view with more events today than the maximum threshold. - mjr Fix fatal error when creating or modifying an...