Forma LMS 1.3 - Multiple SQL Injections

Forma LMS 1.3 Multiple SQL Injections + Author: Filippo Roncari + Target: Forma LMS + Version: 1.3 and probably lower + Vendor: http://www.formalms.org + Accessibility: Remote + Severity: High + CVE: + Full Advisory: https://www.securenetwork.it/docs/advisory/SN-15-03Formalms.pdf + Info:...

Forma LMS 1.3 - Multiple SQL Injections

Forma LMS 1.3 - Multiple SQL Injections Forma LMS 1.3 Multiple SQL Injections + Author: Filippo Roncari + Target: Forma LMS + Version: 1.3 and probably lower + Vendor: http://www.formalms.org + Accessibility: Remote + Severity: High + CVE: + Full Advisory:...

Multiple cross-site scripting vulnerabilities in concrete5 private messages

Concrete5 is an open source content management software. Concrete5 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to exploit the vulnerabilities to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessio...

Drupal Imagefield Info Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Imagefield Info, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information...

WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress WP Statistics is a wordpress based statistics plugin. WordPress WP Statistics suffers from a cross-site scripting vulnerability that...

Cisco Security Manager WEB Interface Cross-Site Scripting Vulnerability

Cisco Security Manager is enterprise-level management software for Cisco security products. A cross-site scripting vulnerability exists in the Cisco Security Manager WEB interface, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used ...

Mozilla Firefox 'WebChannel.jsm' Same-Origin Policy Bypass Vulnerability

Mozilla Firefox is a popular open source WEB browser. Mozilla Firefox 'WebChannel.jsm' fails to properly handle message communication, allowing remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them, which can be bypassed by a same-origin poli...

Flaw in Virtualization Software Could Lead to VM Escapes, Data Theft

Researchers have uncovered a vulnerability in an obscure component of many virtualization platforms that they say can allow an attacker to escape from a guest virtual machine and gain code execution on the host, as well as any other VMs operating on that machine. Experts say the bug affects a wid...

eFront 3.6.15 - Multiple Vulnerabilities

Exploit for php platform in category web applications eFront 3.6.15 Multiple SQL Injection Vulnerabilities + Author: Filippo Roncari | Luca De Fulgentis + Target: eFront + Version: 3.6.15 and probably lower + Vendor: www.efrontlearning.net + Accessibility: Remote + Severity: High + CVE: + Full...

Feed2JS 'magpie_debug.php' Cross-Site Scripting Vulnerability

Feed2JS is the feed content to JS output , easy to embed in the page to make a list of articles . Feed2JS magpiedebug.php handles the url with a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used ...

eFront 3.6.15 - Multiple SQL Injections

eFront 3.6.15 - Multiple SQL Injections eFront 3.6.15 Multiple SQL Injection Vulnerabilities + Author: Filippo Roncari | Luca De Fulgentis + Target: eFront + Version: 3.6.15 and probably lower + Vendor: www.efrontlearning.net + Accessibility: Remote + Severity: High + CVE: + Full Advisory:...

eFront 3.6.15 - Multiple SQL Injections

eFront 3.6.15 Multiple SQL Injection Vulnerabilities + Author: Filippo Roncari | Luca De Fulgentis + Target: eFront + Version: 3.6.15 and probably lower + Vendor: www.efrontlearning.net + Accessibility: Remote + Severity: High + CVE: + Full Advisory:...

Nearly 95% of SAP Systems Vulnerable to Hackers

More than 95 percent of enterprise SAP installations exposed to high-severity vulnerabilities that could allow attackers to hijack a company's business data and processes, new research claims entirely. According to a new assessment released by SAP short for Systems, Applications & Products...

Fortinet FortiADC sslvpn login page cross-site scripting vulnerability

Fortinet FortiADC is a load balancing service solution. A cross-site scripting vulnerability exists in the Fortinet FortiADC sslvpn login page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...

Drupal Smart Trim Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. Smart Trim Module for Drupal is a module application for Drupal. The Drupal Smart Trim Module for Drupal handles cross-site scripting vulnerabilities in field setup forms, allowing remote attackers to exploit the...

Samsung Galaxy S5 latest vulnerabilities: hackers can steal the user's fingerprint data-vulnerability warning-the black bar safety net

Fireeye（FireEye security researchers at the Samsung Galaxy S5 has discovered a new vulnerability. Although the Galaxy phone the fingerprint is encrypted, but hackers can still clone the phone of the user's fingerprint data, thus reducing the fingerprint image, posing as the victims identity...

Cisco (Newsroom) - CS Cross Site Scripting Vulnerability

Document Title: =============== Cisco Newsroom - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 Release Date: ============= 2015-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 146...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2015-02626)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A cross-site scripting vulnerability exists in the filter search form in the Cisco Adaptive Security Appliance web management page, which allows remote attackers to exploit...

Cisco TelePresence Collaboration Desk and Room Endpoints TC Software Cross-Site Scripting Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A cross-site scripting vulnerability exists in the login page of Cisco TC Software versions prior to 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints appliances, which allows remote attackers to exploi...

4th Member of 'Xbox Underground' Group Pleads Guilty to $100 Million Theft

The Fourth and final member of an international hacking group called "Xbox Underground" XU has pled guilty to steal more than $100 Million in intellectual property and data from Microsoft, Epic Games, and Valve Corporation. In addition, the group also stole an Apache helicopter simulator develope...