CVE-2015-8684

Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting XSS attacks and possibly have other unspecified impact as demonstrated by uploading a file with an .html extension, then accessing it via the...

FAQ: Cloud backup of XenMobile managed devices

Is the Worx data encrypted within the backup? If so what is the encryption level? Yes, as Xenmobile uses the iCloud services from Apple for backing up the data: iCloud secures your data by encrypting it when it's sent over the Internet, storing it in an encrypted format when kept on server review...

schwancosmetics.com XSS vulnerability

Vulnerable URL: https://www.schwancosmetics.com/de/service/suche.htm?q=jhhhl=changed...

strategy2050.kz XSS vulnerability

Vulnerable URL: http://strategy2050.kz/ru/search/?query=xxxx%22%3E%3Csvg%20onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 269661 VIP website...

SA139 : November 2016 NTP Security Vulnerabilities

SUMMARY Symantec Network Protection products using affected versions of the NTP reference implementation from ntp.org are susceptible to multiple vulnerabilities. A remote attacker can modify the targets system time, prevent the target from synchronizing its time, cause denial of service through...

CVE-2017-2950

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2950

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to layout functionality. Successful exploitation could lead to arbitrary code execution...

Pinch and Zoom Does Not Function When Using Receiver on iPad

Unable to zoom and expand application on iPad when using Receiver. The functionality works fine on iPhone...

torcloud.pw XSS vulnerability

Vulnerable URL: http://torcloud.pw/search.php?q='"--!confirmOPENBUGBOUNTY...

sonoworld.com XSS vulnerability

Vulnerable URL: https://www.sonoworld.com/Client/SearchResults.aspx?SearchString=fetal heart'"--!...

cpotools.com XSS vulnerability

Vulnerable URL: http://www.cpotools.com/on/demandware.store/Sites-Bosch-Site/default/Search-Show?q=tools'"--!...

brooksrunning.com XSS vulnerability

Vulnerable URL: http://www.brooksrunning.com/enus/search?q=beast'"--!...

ucsf.edu XSS vulnerability

Vulnerable URL: http://www.ucsf.edu/search?search=alert/OPENBUGBOUNTY/...

echobridgeac.com XSS vulnerability

Vulnerable URL: http://www.echobridgeac.com/search.php?keyword=sd=homeent...

CVE-2016-7966

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign = or a space into the injected HTML, which greatly reduces the available HTML functionality...

CVE-2016-7966

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign = or a space into the injected HTML, which greatly reduces the available HTML functionality...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the RegExp class in the Flash Player software platform arises from a violation of the buffer’s initial limit. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code as a result of violating the search functionality...

ljudfokus.se XSS vulnerability

Vulnerable URL: http://www.ljudfokus.se/showseek.php?searchstring=...

CVE-2016-7868

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution...