Wordpress plugin bordeaux theme upload shell vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An upload vulnerability exists in the WordPress plugin bordeaux theme, which can be exploited by an attacker ...

kensoft CMS SQL Injection Vulnerability

kensoft CMS is a content management system. A SQL injection vulnerability exists in the ft parameter of the dispatch.php page of kensoft Cms, which can be exploited by attackers to obtain sensitive information...

SUSE-SU-2016:2325-1 Security update for openstack-keystone, openstack-nova, and openstack-swift

This update for openstack-keystone, openstack-nova, and openstack-swift fixes the following issues: - Fix hybrid backend from keystone v3 bsc967356 - Fix cleanup when block migration fails bsc960015 - Avoid host data leak bsc960601, CVE-2015-7548 - Fix init script for openstack-swift-object-expir...

UBUNTU-CVE-2016-3893

The wcdcalhwdepioctlshared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

UBUNTU-CVE-2016-6345

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...

Hey, Music Lovers! Last.Fm Hack Leaks 43 Million Account Passwords

Another Day, Another Data Breach! If you love to listen to music online and have an account on Last.fm website, your account details may have compromised in a data breach that leaked more than 43 Million user personal data online. Last.fm was hacked in March of 2012 and three months after the...

SQL Injection Vulnerability in UserGUID Parameter of UserDataSync.aspx Page of Nanjing Fargo Streaming Media System

Nanjing Fargo streaming media system is mainly used for applications such as network TV, live event broadcasting, remote education, enterprise roadshow and multimedia public information service, etc. The system integrates computer, network, audio/video and mobile communication and other related...

The vulnerability of the Windows operating system allows a perpetrator to bypass the Secure Kernel Mode protection mechanism and obtain confidential information.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating locally, to bypass the security mechanisms of Secure Kernel Mode and obtain confidential information through a specially creat...

CVE-2016-4253

The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecified vectors...

UBUNTU-CVE-2014-9898

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and...

Unspecified Vulnerability in Oracle E-Business Suite Applications Manager

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite version 12.1.3 contains a security vulnerability in the Applications Manager component, which can be exploited by remote attackers to compromise confidentiality...

The vulnerability of the libxml2 library allows attackers to obtain confidential information, cause service failures, or exert other types of damage.

The vulnerability of the htmlParseComment function in the libxml2 library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to obtain confidential information, cause service failure termination of the application, or have other effects through an unclosed HTML...

The vulnerability of the libxml2 library, which allows a hacker to cause a service failure or obtain confidential information

The vulnerability of the xmlSAX2TextNode function SAX2.c in the HTML parser of the libxml2 library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or obtain confidential information through specially crafted XML dat...

Exploit details: change any user of the Uber-password-vulnerability warning-the black bar safety net

Vulnerability status: resolvedclosed Disclosure Time: 2 0 1 6 7 1 5 am 5 points 3 8 points Report objects: Uber Vulnerability type: authentication class Bonus: 1 0 0 0 0$ ! Vulnerability overview: Uber is a global instant car software, the software has now covered the global more than sixty...

UBUNTU-CVE-2016-3813

The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28172322 and Qualcomm internal bug CR1010222...

SQLite Information Disclosure Vulnerability

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.13.0 before the version of a security vulnerability , the...

The vulnerability of the Thunderbird email client, which allows a malicious individual to gain access to confidential information

The Thunderbird email client contains a vulnerability related to errors in the implementation of the SVG filter. This vulnerability allows a malicious actor to gain access to confidential information about displacement and correlations, as well as to circumvent domain restriction policies. The...

Mass General Hospital Confirms Third-Party Breach

A breach at Massachusetts General Hospital has potentially compromised the information of roughly 4,300 dental patients, the hospital warned Wednesday. MGH was quick to point out that the data leaked wasn’t stored or maintained on its systems but those of a third-party vendor that assists the...

Security Advisory - Data Leak Vulnerability in the FusionCompute

The FusionCompute is a cloud operating system OS. It virtualizes computing, storage, and network resources, and implements centralized management and scheduling of the virtual resources through a unified interface. Huawei FusionCompute has sensitive data leak vulnerability. An attacker can log in...

CVE-2016-2538

Multiple integer overflows in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service QEMU process crash or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the 1...