perl-XML-Twig XML External Entity Injection Vulnerability

An XML external entity injection vulnerability exists in perl-XML-Twig. A remote attacker could exploit this vulnerability to disclose sensitive information or cause a denial of service because the program fails to properly handle XML external entities...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11170)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11163)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to execute arbitrary code in the browser context to disclose sensitive information or cause a denial of...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-11161)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome. The vulnerability can be exploited by an attacker to execute arbitrary code in the browser context, disclose sensitive information or cause a denial of service...

D-Link DSL-2730U/2750U/2750E ADSL Router - Remote File Disclosure

!/bin/sh D-Link ADSL ROUTER DSL-2730U IN1.02 Remote File Disclosure Modem Name: DSL-2730U/DSL-2750E Time and Date: 2012-05-23 09:51:16 HardwareVersion: U1 Firmware Version: IN1.02/SEA1.04/SEA1.07 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackeror...

OIC Exponent CMS SQL Injection Vulnerability

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

CVE-2016-9136

Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a "Buffer Over-read" issue...

Yelp: ClickJacking

hi there i have found a clickjacking vulnerability in your site in the index home page: https://www.yelp.com/ Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when th...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Shipping Execution Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Shipping Execution is one of the components of the management of transportation information. A remote security vulnerability exists in the...

SQL Injection Vulnerability in Siemens Automation License Manager

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A SQL injection vulnerability exists in Siemens Automation License Manager. A remote attacker can access port 4410/TCP to read and write ALM configuration information,...

CVE-2016-6688

The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30593080...

CVE-2016-6684

The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243...

CVE-2016-6677

The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955...

SetucoCMS vulnerable to session management

Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains session management vulnerability. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

camel-xstream: Java object de-serialization vulnerability leads to RCE

It was found that Apache Camel's camel-xstream component was vulnerable to Java object deserialization. This vulnerability permits deserialization of data which could lead to information disclosure, code execution, or other possible attacks...

Information disclosure

Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2016-4755

Terminal in Apple OS X before 10.12 uses weak permissions for the .bashhistory and .bashsession files, which allows local users to obtain sensitive information via unspecified vectors...

3Webs CMS SQL Injection Vulnerability

3Webs CMS is a content management system. 3Webs CMS suffers from a SQL injection vulnerability that can be exploited by an attacker via a SQL injection command, resulting in the disclosure of database information...

Kerio Control Memory Corruption Vulnerability

Kerio Control is a simple and fast unified threat management system. Memory corruption vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitive...

Information disclosure

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by...