4320 matches found
CVE-2012-5184
Cross-site scripting XSS vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5185
Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to read or delete files by leveraging guest access...
Directory traversal
Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to read or delete files by leveraging guest access...
Cross site scripting
Cross-site scripting XSS vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5185
Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to read or delete files by leveraging guest access...
CVE-2012-5184
Cross-site scripting XSS vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5185
CVE-2012-5185 affects Olive Toast Documents Pro (formerly Files HD) on iOS, prior to version 1.11.1, via a directory traversal vulnerability that lets a guest user read or delete files. Root cause is improper path handling exposing file system access. Affected product versions: Documents Pro/File...
CVE-2012-5184
Documents Pro (Olive Toast Software Ltd) for iOS is affected by a Cross-site scripting (XSS) vulnerability in the file viewer prior to version 1.11.1. The issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors when the app is used through a web browser, potentiall...
Documents Pro (formerly Files HD) vulnerable to directory traversal
Overview Documents Pro provided by Olive Toast Software Ltd. contains a directory traversal vulnerability. Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a directory traversal vulnerability. Keigo Yamazaki of LAC Co., Ltd reported...
Documents Pro (formerly Files HD) vulnerable to cross-site scripting
Overview Documents Pro provided by Olive Toast Software Ltd. contains a cross-site scripting vulnerability. Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a cross-site scripting vulnerability. Keigo Yamazaki of LAC Co., Ltd. report...
JVN#91881278: Documents Pro (formerly Files HD) vulnerable to cross-site scripting
Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a cross-site scripting vulnerability. Impact When a user uses Documents Pro through a web browser, an arbitrary script may be executed on the user's web browser. Solution Update the...
JVN#52197991: Documents Pro (formerly Files HD) vulnerable to directory traversal
Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a directory traversal vulnerability. Impact A guest user may view, delete or perform other actions on files that it does not have privileges to. Solution Update the software Update to...
Out-of-bounds
Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted document...
Malware stole 3000 confidential Documents from Japan ministry
Japan ministry become the recent victim of a cyber attack through a malware that suspected to have compromised and sent overseas more than 3,000 confidential documents from the ministry, including many on global trade negotiations. After investigation, experts found that Hackers use "HTran" the...
Malware stole 3000 confidential Documents from Japan ministry
Japan ministry become the recent victim of a cyber attack through a malware that suspected to have compromised and sent overseas more than 3,000 confidential documents from the ministry, including many on global trade negotiations. After investigation, experts found that Hackers use "HTran" the...
CVE-2012-6463
Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs...
OpenDocMan 1.2.6.2 SQL Injection / Access Bypass
1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION SELECT query to run but I do not think it's exploitable because there is a second query that runs with the i...
United Socialist Party of Venezuela's twitter account hacked
LulzSec Peru hack the official twitter account @partidopsuv of the United Socialist Party of Venezuela PSUV, in the evening hours of Thursday. Hackers start twitting from hacked account, "No to communism. Corrupt Chavez get out." In a blog post Party people announce that their twitter account is...
Oracle Forms Recognition Detection
The remote host has Oracle Forms Recognition installed. Oracle Forms Recognition is a software toolset for processing captured documents and delivering the data to backend systems. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62819; scriptversion"1.9";...
Cross domain access to object constructors can be used to facilitate cross-site scripting – Opera Security Advisories
JavaScripts are able to redefine and override the methods of native objects. They may also do this with the native objects of any document that shares the same origin. By redefining the methods of another document through the constructor property of the document’s host objects, a malicious script...