257 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...
CVE-2017-7384
The provided data describes a Cross-Site Scripting (XSS) vulnerability in FlipBuilder Flip PDF, exploitable by remote attackers via the currentHTMLURL parameter to inject arbitrary web script or HTML. Affected software is FlipBuilder Flip PDF; the underlying cause and exact exploit vector are not...
CVE-2017-7384
Cross-site scripting XSS vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the currentHTMLURL parameter...
lahuertajalisco.gob.mx XSS vulnerability
Vulnerable URL: http://www.lahuertajalisco.gob.mx/Flip/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 03.10.2017 Latest check for patch:| 03.10.2017 14:55 GMT Vulnerability type:|...
pdf.skabertrang.dk XSS vulnerability
Open Bug Bounty ID: OBB-227727 Description| Value ---|--- Affected Website:| pdf.skabertrang.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Android Rowhammer attack vulnerability (Drammer)
Project Description Drammer is a new attack that exploits the Rowhammer hardware vulnerability on Android devices. It allows attackers to take control over your mobile device by hiding it in a malicious app that requires no permissions. Practically all devices are possibly vulnerable and must wai...
Critical Android Vulnerability 'Drammer' Impacts Millions of Handsets
Researchers have published details of a new method for exploiting a problem with Android devices tied to a hardware flaw within DRAM memory modules that can allow attackers to get root-level access to target machines. The vulnerability, dubbed Drammer, could give an attacker root access to millio...
WordPress Flip Slideshow Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Flip Slideshow Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Simple Coin Flip (Phone+Wear) - External URLs, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Simple Coin Flip Phone+Wear published at the 'play' market has multiple vulnerabilities...
vastuthantra.com XSS vulnerability
Vulnerable URL: http://www.vastuthantra.com/flip/index.php?pagetitle=...
DRAM 'Rowhammer' Memory Bit Flip Privilege Elevation Vulnerability
DRAM, or Dynamic Random Access Memory, is the most common type of system memory. DRAM devices have security vulnerabilities that allow a local user to run a program that continuously accesses the DRAM, flipping the value of a cell from 1 to 0, or vice versa, allowing elevated privileges to execut...
Rowhammer - NaCl Sandbox Escape
Rowhammer - NaCl Sandbox Escape Sources: http://googleprojectzero.blogspot.ca/2015/03/exploiting-dram-rowhammer-bug-to-gain.html https://code.google.com/p/google-security-research/issues/detail?id=284 Full PoC:...
Rowhammer - NaCl Sandbox Escape
Sources: http://googleprojectzero.blogspot.ca/2015/03/exploiting-dram-rowhammer-bug-to-gain.html https://code.google.com/p/google-security-research/issues/detail?id=284 Full PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/36311.tar.gz This is a proof-of-conce...
Page Flip Image Gallery <= 0.2.2 - Remote FD Vuln
The page-flip-image-gallery WordPress plugin was affected by a Remote FD Vuln security vulnerability...
Wordpress Plugin Page Flip Image Gallery <= 0.2.2 - Remote FD Vuln
No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | Wordpress Plugin Page Flip Image Gallery = 0.2.2 Remote File Disclosure Vulnerability D :...
Joomla Component FlippingBook 1.0.4 - SQL Injection Vulnerability
No description provided by source. A L G E R I A S E C U R I T Y C R E W Joomla Component FlippingBook 1.0.4 SQL Injection Vulnerability found by: cO2 Algeria Security Crew Contact: c02athotmail.de Website: http://www.Dz-Secure.com Greetings: to all hackers DZ . . . ScriptName : 'Joomla' ModuleNa...
FLIP 0.9 .0.1029 text.php name Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Flip 3.0 'config.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30312/info Flip is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserve...
Linux kernel 3.14-rc1 <= 3.15-rc4 - Raw Mode PTY Local Echo Race Condition (x64) Local Privilege Escalation
No description provided by source. / CVE-2014-0196: Linux kernel = v3.15-rc4: raw mode PTY local echo race condition Slightly-less-than-POC privilege escalation exploit For kernels = v3.14-rc1 Matthew Daley [email protected] Usage: $ gcc cve-2014-0196-md.c -lutil -lpthread $ ./a.out + Resolving...