Lucene search
K

7377 matches found

The Hacker News
The Hacker News
added 2013/02/19 2:52 p.m.14 views

Samsung's new OS Tizen 2.0 source code released

The Tizen 2.0 source code and SDK has officially been released. Tizen is a Linux-based open-source software platform backed by Intel and Samsung Electronics, that is designed for smartphones, tablets, smart TVs and in-car systems and it's designed to run apps written using web technologies...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2013/02/19 3:52 a.m.16 views

Samsung's new OS Tizen 2.0 source code released

The Tizen 2.0 source code and SDK has officially been released. Tizen is a Linux-based open-source software platform backed by Intel and Samsung Electronics, that is designed for smartphones, tablets, smart TVs and in-car systems and it’s designed to run apps written using web technologies...

7AI score
Exploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2013/02/15 12:0 a.m.61 views

JVN#02596643: 3DM (3ware Disk Manager) vulnerable to directory traversal

3DM provided by LSI is a software to manage a RAID controller. 3DM contains a directory traversal vulnerability. Impact A remote attacker may obtain arbitrary files. Solution Use 3DM2 The developer states that the development of 3DM is discontinued and there are no plans for 3DM to be modified. U...

5CVSS6.5AI score0.00125EPSS
Exploits0
ThreatPost
ThreatPost
added 2013/02/14 12:0 p.m.18 views

Google Play Gives User Data to App Devs

Android application developer Dan Nolan claims that the Google Play store sends software developers the names, approximated locations, and email addresses of every individual that downloads one of their applications. Nolan created a “Paul Keating Insult Generator” application that is apparently...

6.3AI score
Exploits0References3
Fedora
Fedora
added 2013/02/10 4:37 a.m.24 views

[SECURITY] Fedora 17 Update: android-tools-20130123git98d0789-1.fc17

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

3.3CVSS0.9AI score0.00025EPSS
Exploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2013/02/08 12:0 a.m.39 views

JVN#95863326: Cybozu Garoon vulnerable to cross-site scripting

Cybozu Garoon provided by Cybozu is a groupware. Cybozu Garoon contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser when the user is assigned the "logging" permission. Solution Update the Software Update to the latest version accordin...

4.3CVSS5.9AI score0.00296EPSS
Exploits0
The Hacker News
The Hacker News
added 2013/02/03 6:53 a.m.14 views

Wine On Android For Running Windows Apps

As you know, many enthusiasts Android mobile users wishing for alternate of WINE software for Android mobiles or tablet as well, that allow applications designed for Microsoft Windows to run on Unix-like operating systems. Sounds Interesting ? Alexandre Julliard, the original developer behind the...

6.7AI score
Exploits0
securityvulns
securityvulns
added 2013/01/28 12:0 a.m.74 views

Wordpress Developer Formatter CSRF Vulnerability

==================================================================================================================== Exploit Title: Wordpress Developer Formatter CSRF Vulnerability Date: 21/01/13 Author: Junaid Hussain - illSecure Research Group - Contact: [email protected] | Website:...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2013/01/22 12:0 a.m.11 views

WordPress Plugin Developer Formatter - Cross-Site Request Forgery

WordPress Plugin Developer Formatter - Cross-Site Request Forgery ==================================================================================================================== Exploit Title: Wordpress Developer Formatter CSRF Vulnerability Google Dork: inurl:devformatter/devformatter.php...

0.2AI score
Exploits0
Patchstack
Patchstack
added 2013/01/22 12:0 a.m.12 views

WordPress Developer Formatter Plugin 3.5 - CSRF

Developer Formatter plugin is prone to a cross site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the plugin...

4.1AI score
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2013/01/22 12:0 a.m.27 views

WordPress Plugin Developer Formatter - Cross-Site Request Forgery

==================================================================================================================== Exploit Title: Wordpress Developer Formatter CSRF Vulnerability Google Dork: inurl:devformatter/devformatter.php Date: 21/01/13 Author: Junaid Hussain - illSecure Research Group -...

7.4AI score
Exploits0
0day.today
0day.today
added 2013/01/21 12:0 a.m.27 views

Wordpress Developer Formatter CSRF Vulnerability

Wordpress Developer Formatter suffers from a cross site request forgery vulnerability which can be used to add persistent XSS into posts which could then lead to cookie stealing, malware distribution or even a defacement...

6.3AI score
Exploits0
Packet Storm
Packet Storm
added 2013/01/21 12:0 a.m.17 views

WordPress Developer Formatter Cross Site Request Forgery

==================================================================================================================== Exploit Title: Wordpress Developer Formatter CSRF Vulnerability Date: 21/01/13 Author: Junaid Hussain - illSecure Research Group - Contact: [email protected] | Website:...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2013/01/16 12:0 a.m.60 views

Oracle Application Framework - Diagnostic Mode Bypass

Trustwave SpiderLabs Security Advisory TWSL2012-023: Oracle Application Framework Diagnostic Mode Bypass Vulnerability Published: 1/15/2013 Version: 1.0 Vendor: Oracle www.oracle.com Product: Oracle Application Framework Version affected: 11.5.10.2, 12.0.6, 12.1.3 Product description: The Oracle...

6.4CVSS6.5AI score0.2994EPSS
Exploits5
Fedora
Fedora
added 2013/01/12 12:56 a.m.22 views

[SECURITY] Fedora 18 Update: drupal6-ctools-1.10-1.fc18

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pa ges. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it...

2.6CVSS0.5AI score0.00193EPSS
Exploits0
Mozilla
Mozilla
added 2013/01/08 12:0 a.m.57 views

Compartment mismatch with quickstubs returned values — Mozilla

Mozilla developer Boris Zbarsky reported reported a problem where jsval-returning quickstubs fail to wrap their return values, causing a compartment mismatch. This mismatch can cause garbage collection to occur incorrectly and lead to a potentially exploitable crash...

9.3CVSS3.5AI score0.02632EPSS
Exploits0References2Affected Software5
ThreatPost
ThreatPost
added 2013/01/07 6:33 p.m.5 views

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

0.2AI score
Exploits0References18
exploitpack
exploitpack
added 2013/01/04 12:0 a.m.25 views

Simple Web Server 2.3-rc1 - Directory Traversal

Simple Web Server 2.3-rc1 - Directory Traversal Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal Date: 01/02/2013 Exploit Author: CwG GeNiuS Vendor Homepage: http://www.pmx.it Software Link: http://www.pmx.it/download/sws-2.3-rc1-i686.exe Version: 2.3-rc1 and earlier Tested on: Windows...

0.3AI score
Exploits0
securityvulns
securityvulns
added 2013/01/02 12:0 a.m.33 views

Persistent XSS vulnerability in WP-UserOnline

Hello 3APA3A! in 2010 I've disclosed multiple vulnerabilities Cross-Site Scripting and Full path disclosure in WordPress plugin WP-UserOnline http://securityvulns.ru/Ydocument162.html, http://seclists.org/fulldisclosure/2010/Jul/8. And recently I've disclosed the exploit for persistent XSS...

6AI score
Exploits0
The Hacker News
The Hacker News
added 2013/01/01 4:20 p.m.4 views

Developer expelled by Google Play Store on posting Malicious Android apps

Google Play Developer Console enables developers to easily publish and distribute their applications directly to users of Android-compatible phones. Recently someone posted on Reddit that a developer is trying to spread malware by masquerading infected programs as legitimate software. The account...

6.6AI score
Exploits0
Rows per page
Query Builder