[SECURITY] Fedora 23 Update: kf5-kross-5.24.0-1.fc23

Kross is a scripting bridge to embed scripting functionality into an application. It supports QtScript as a scripting interpreter backend...

[SECURITY] Fedora 23 Update: kf5-bluez-qt-5.24.0-1.fc23

BluezQt is Qt-based library written handle all Bluetooth functionality...

[SECURITY] Fedora 23 Update: kf5-baloo-5.24.0-1.fc23

A Tier 3 KDE Frameworks 5 module that provides indexing and search function ality...

[SECURITY] Fedora 24 Update: kf5-baloo-5.24.0-1.fc24

A Tier 3 KDE Frameworks 5 module that provides indexing and search function ality...

[SECURITY] Fedora 24 Update: kf5-bluez-qt-5.24.0-1.fc24

BluezQt is Qt-based library written handle all Bluetooth functionality...

90minut.pl XSS vulnerability

Vulnerable URL: http://www.90minut.pl/szukaj.php?tekst=Legia%25...

Log pollution can potentially lead to local HTML injection (NC-SA-2016-002)

The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...

ruilen.nl XSS vulnerability

Vulnerable URL: https://www.ruilen.nl/advertenties/zoeken.php?list=1=0==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1837734 VIP website status:| No Check ruilen.nl SSL...

SQL injection attack

PMASA-2016-40 Announcement-ID: PMASA-2016-40 Date: 2016-07-14 Summary SQL injection attack Description A vulnerability was reported where a specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. Severity We consider this...

wikimapia.org XSS vulnerability

Vulnerable URL: http://wikimapia.org/search/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3199 VIP website status:| Yes Check wikimapia.org SSL connection:| Grade: F Coordinated...

SQL injection attack

PMASA-2016-34 Announcement-ID: PMASA-2016-34 Date: 2016-07-12 Summary SQL injection attack Description A vulnerability was reported where a specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. Severity We consider this...

stappenvzw.be XSS vulnerability

Vulnerable URL: http://www.stappenvzw.be/zoeken.php?searchstring=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7147309 VIP website status:| No Check stappenvzw.be SSL connection...

Apple Patents Technology to remotely disable your iPhone Camera at Concerts

Here's something you'll not like at all: Apple has been awarded a patent for technology that would prevent you from snapping pictures and shooting videos with your iPhone or iPad at places or events, like concerts or museums, where it might be prohibited or inappropriate. The patent, granted on...

CVE-2016-4803

CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject...

CVE-2016-4803

CVE-2016-4803 affects dotCMS prior to 3.3.2, where the sendEmail functionality is vulnerable to CRLF injection in the subject, enabling remote attackers to inject arbitrary email headers. Root cause is unsanitized CRLF sequences in email header fields. Impact described as header injection risk fo...

Google Play Hit With Rash of Auto-Rooting Malware

Researchers have identified a recent wave of malware targeting the Google Play app marketplace that entices users to download utilities and games that when installed surreptitiously root devices. The exploit, which mobile security firm Lookout calls autorooting malware, gives attackers complete...

Mail.ru: Back Refresh Attack after registration and successful logout

About the vulnerability: The back, forward and refresh buttons of the browser can be used to steal the password of a previous user. In this article we examine the vulnerability and look at ways to solve them.A web browser has the functionality to store the recent pages browsed by the user in its...

Option CloudGate CG0192-11897 - Multiple Vulnerabilities

Option CloudGate Insecure Direct Object References Authorization Bypass Vendor: Option NV Product web page: http://www.option.com Affected version: CG0192-11897 Summary: The CloudGate M2M gateway from Option provides competitively priced LAN to WWAN routing and GPS functionality in a single basic...

Option CloudGate CG0192-11897 - Multiple Vulnerabilities

Option CloudGate CG0192-11897 - Multiple Vulnerabilities Option CloudGate Insecure Direct Object References Authorization Bypass Vendor: Option NV Product web page: http://www.option.com Affected version: CG0192-11897 Summary: The CloudGate M2M gateway from Option provides competitively priced...

CodoForum 3.4 - Persistent Cross-Site Scripting

CodoForum 3.4 - Persistent Cross-Site Scripting Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting Stored XSS Google Dork: intext:"powered by codoforum" Date: 01/06/2016 Exploit Author: Ahmed Sherif OffensiveBits Vendor Homepage: http://codologic.com/page/ Software Link:...