Kanboard Design Vulnerability (CNVD-2017-30947)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Kanboard Design Vulnerability (CNVD-2017-30938)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Kanboard Design Vulnerability (CNVD-2017-30940)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Kanboard Design Vulnerability (CNVD-2017-30939)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Kanboard Design Vulnerability (CNVD-2017-30953)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

Chengdu Municipal People's Government Network Governance Platform Android APP has overstepping loopholes

Chengdu Municipal People's Government Network Governance Platform Android APP is a people's service software. There is an overstepping vulnerability in Chengdu Municipal People's Government Network Governance Platform Android APP. After registering and logging into the client, an attacker can...

Fedora pure-ftpd misconfiguration vulnerability

Fedora is a Linux-based operating system developed by the Fedora Project community and sponsored by Red Hat. pure-ftpd is one of the FTP service programs. A misconfiguration vulnerability exists in Downstream version 1.0.46-1 of pure-ftpd in Fedora. A remote attacker could exploit this...

Kanboard Password Reset Vulnerability (CNVD-2017-28605)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.46. An...

PT-2017-17385

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient for Android versions prior to V1.0.2.2 Description A security issue was found in the TLS protocol implementation, allowing an attacker to intercept and alter data during a Man-in-the-Middle MitM attack...

CVE-2017-3749

On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750...

PT-2017-16016

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions AK 2013 Description The issue affects the User Interface subsystem of the Sun ZFS Storage Appliance Kit AK component, allowing an unauthenticated attacker with network access via HTTP to compromise th...

Uber: Users can falsely declare their own Uber account info on the monthly billing application

When applying for monthly billing, statistics and data regarding account usage that was fetched and subsequently submitted could be tampered with. This data would be reviewed by a human making a credit decision, potentially influencing their decision inappropriately in favor of the applicant. Whe...

Xen Hypervisor Path Traversal

The vulnerability of the libxl library in Xen hypervisors arises from the lack of restrictions on writing data when using the qemu-xen device. Exploiting this vulnerability allows a malicious actor to write data to a disk that is intended only for reading...

Mobilya Scripti 2 Shell Upload

Exploit Title: Mobilya Scripti v2 File Upload 2. Google Dork: intext:Lütfen sadece .doc yada .pdf uzantılı dosya gönderin. 3. Date: 10.4.2016 4. Exploit Author: [email protected] 5. Vendor Homepage: http://www.hazirscriptler.web.tr/mobilya-scripti-php-v2 6. Version: v2 7. Tested...

Malwarebytes Anti-Malware Security Bypass Vulnerability

Malwarebytes Anti-Malware MBAM is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. There are security bypass vulnerabilities in MBAM. A...

Apache Tapestry Denial of Service Vulnerability

Apache Tapestry is the United States Apache Apache Software Foundation developed a set of frameworks used to create Java-based Web applications. A security vulnerability exists in Apache Tapestry versions prior to 5.3.6, which arises from the program's failure to check for tampering when storing...

MantisBT SQL Injection Vulnerability (CNVD-2015-04521)

MantisBT is a PHP language development, open source problem management system , to achieve a delicate balance between simplicity and functionality . MantisBT suffers from a SQL injection vulnerability. Because the program fails to filter user-supplied data, an attacker can exploit the vulnerabili...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the Debian GNU/Linux operating system’s Shorewall package can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Gentoo Linux Remote Compromise

The multiple vulnerabilities in the rdesktop package up to version 1.6.0 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Whistleblowers' Lawyer Finds Malware On Hard Disk Planted By Police

An Arkansas lawyer representing three police whistleblowers has claimed that the law enforcement officials at the Fort Smith Police Department FSPD tried to infect his computer with Trojan viruses in order to spy on their legal opponents. What’s the issue? A lawyer Matthew Campbell of the Pinnacl...