LebiShop Mall Backend Template Arbitrary File Write Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The management background of the mall system provides a generate template or generate a single page in the template function, which can generate the...

LebiShop Mall Backend Arbitrary File Write Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The mall system's management background provides a system template file editing function, the function of the page file parameters have not been strict...

LebiShop Mall Backend Select Skin Catalog Traversal Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The administrative background of this mall system provides a template management function , when editing the pages in the template , it provides the...

Observium 0.16.7533 Code Execution / Cross Site Request Forgery

Exploit title: Observium Commercial - Authenticated RCE Author: Dolev Farhi Contact: dolevf at protonmail.com Date: 28-04-2016 Vendor homepage: http://observium.org/ Software version: CE 0.16.7533 Authenticated remote code execution Using either CSRF or by editing the whois binary field in the...

Slack: Stored XSS on team.slack.com using new Markdown editor of posts inside the Editing mode and using javascript-URIs

Hi, I noticed while looking at an old article I made a while ago that some links were actually inserted as javascript:-links. Doing some modifications to these actually revealed that inside editing mode, no protection is added for getting arbitrary scripts to run. This means that by catching the...

Photo Editor Collage Maker Pro - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor Collage Maker Pro published at the 'play' market has multiple vulnerabilities...

PhotoLine Handles JPG Image Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the program's handling of the JPG format. Allowing an attacker to exploit this vulnerability to construct malformed JPG files could crash the program...

Cute Photo Editing Collages - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cute Photo Editing Collages published at the 'play' market has multiple vulnerabilities...

No Crop Video Editor Instagram - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application No Crop Video Editor Instagram published at the 'play' market has multiple vulnerabilities...

Color Effects Photo Editing - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Color Effects Photo Editing published at the 'play' market has multiple vulnerabilities...

Photofy Photo Editing Collage - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Photofy Photo Editing Collage published at the 'play' market has multiple vulnerabilities...

Video Dieter 2 - trim & edit - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Video Dieter 2 - trim & edit published at the 'play' market has multiple vulnerabilities...

photo editing, painted image - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application photo editing, painted image published at the 'play' market has multiple vulnerabilities...

Enable this New Setting to Secure your Computer from Macro-based Malware

Do you deal with MS Word files on the daily basis? If yes, then are you aware that even opening a simple doc file could compromise your system? It is a matter to think that the virus does not directly affect you, but it is you who let the virus carry out the attack by enabling deadly "Macros" to...

Memory Corruption Vulnerability in PhotoLine's Handling of AVI Files

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the AVI format, which can be exploited by an attacker to construct malformed AVI files that can crash the program and cause a denial of service condition...

MGASA-2016-0122 Updated moodle packages fix security vulnerability

In Moodle before 2.8.11, teachers who otherwise were not supposed to see students' emails could see them in the participants list CVE-2016-2151. In Moodle before 2.8.11, Moodle traditionally trusted content from external DB, however it was decided that external datasources may not be aware of web...

Veris: Complete or Edit Another User's Profile

Hi, I've found an issue where verified users can complete and submit a profile on behalf of another user. I've attached two video POCs unlisted on YouTube. Completion - https://www.youtube.com/watch?v=erH7ShUpqso Editing - https://youtu.be/IQboAIHNpq4 Steps to reproduce: 1. Register a new user...

New Relic: Emails and alert policies can be altered by malicious users.

Recreate Steps 1 Create Two Accounts 2 In separate browsers Firefox and Chrome log into each account and go to the edit page a https://rpm.newrelic.com/users//edit 3 Check one of the email or alert boxes and click save. Gather the post. a Should be similar to this:...

E-TILLER期刊采编系统 /ch/reader/inner_key_query_article_list.aspx等2处 POST注入漏洞

No description provided by source...

IBM WebSphere Portal Design Vulnerability

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. A security vulnerability exists in IB...