15101 matches found
SQL Injection Vulnerability in Website Building System of Shanghai Longmind Digital Technology Co.
Ltd. is a professional website construction application technology and internet marketing service provider in Shanghai. A SQL injection vulnerability exists in Lonmin's website building system, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2013-4693
WordPress Xorbin Digital Flash Clock 1.0 has XSS...
Cross site scripting
WordPress Xorbin Digital Flash Clock 1.0 has XSS...
CVE-2013-4693
CVE-2013-4693 affects the WordPress plugin Xorbin Digital Flash Clock 1.0. The vulnerability is a Flash-based XSS in the plugin’s frontend due to the xorDigitalClock.swf component, where the external input taken from the widgetUrl parameter is passed into getURL. This causes injected script execu...
CVE-2013-4693
WordPress Xorbin Digital Flash Clock 1.0 has XSS...
CVE-2013-4693: Improper Neutralization of Input During Web Page Generation
WordPress Xorbin Digital Flash Clock 1.0 has XSS...
PT-2019-6966
Name of the Vulnerable Software and Affected Versions WordPress Xorbin Digital Flash Clock version 1.0 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially...
DEBIAN-CVE-2019-19963
An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversion of the nonce, leading to a side-channel attack against the nonce...
UBUNTU-CVE-2019-19963
An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversion of the nonce, leading to a side-channel attack against the nonce...
Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01299)
FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...
Denial of Service Vulnerability in UDC-301CE Measurement and Control Unit (NVD-C-2019-210341)
UDC-301CE measurement and control device is a digital measurement and control device to realize line or transformer interval measurement and control function. A denial of service vulnerability exists in the UDC-301CE, which can be exploited by an attacker to cause a system crash...
Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01297)
FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...
Rooster Teeth Attack Showcases New Magecart Approach
The online store for the Rooster Teeth video-streaming service has been hit with a malicious web redirect attack by Magecart, which allowed the cybercriminals to harvest users’ payment-card details. The attack marks a slight departure from the group’s typical tactics. Rooster Teeth, which offers...
evenements.infopro-digital.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1039710 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Pairing Privacy and Security with Digital Identities in Retail
As today’s customer expectations for digital shopping continue to escalate, many online retailers are leveraging consumers’ unique digital identities to provide a seamless and secure account registration and login process. However, it’s important to recognize the security and privacy implications...
Cisco IOS XE Software Digital Signature Verification Bypass (cisco-sa-20180926-digsig)
According to its self-reported version, Cisco IOS XE Software is affected by a digital signature verification bypass vulnerability in the Image Verification feature. An authenticated, local attacker can exploit this, by uploading a malicious software image or file to an affected device, in order ...
digitalredovisning.nu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1036267 Security Researcher Hchabik Helped patch 2461 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting digitalredovisning.nu websi...
SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.
Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....
SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.
Digital campus is based on digital information and network, established on computer and network technology for the collection, processing, integration, storage, transmission and application of campus information on teaching, scientific research, management, technical services, life services, etc....
CAINE 11 - GNU/Linux Live Distribution For Digital Forensics Project, Windows Side Forensics And Incident Response
CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a Digital Forensics project. Currently, the project manager is Nanni Bassetti Bari - Italy. CAINE offers a complete forensic environment that is organized to integrate existing software tools as...