113 matches found
Wire 信息泄露漏洞
Wire is a chat software by an individual developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original greeting method, PING. Wire suffers from a security vulnerability that stems from the fact that when a us...
Mail.ru: Improper access control leading to deletion of Greeting videos on {https://smtp.8mar.mail.ru/}
smtp.8mar.mail.ru was pointing to partner-operated service where it was possible to delete uploaded greetings videos. No risks for Mail.ru users or active projects were identified...
FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43410)
FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/voicemailgreetings/voicemailgreetingedit.php in FusionPBX 4.4.1. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via t...
PT-2019-15833 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.4.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail id parameters in the voicemail greeting edit.php file. Recommendations: For FusionPBX...
CVE-2018-7747
Multiple cross-site scripting XSS vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a greeting message, 2 the email transaction log, or 3 an imported form...
CVE-2018-7747
Multiple cross-site scripting XSS vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a greeting message, 2 the email transaction log, or 3 an imported form...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a greeting message, 2 the email transaction log, or 3 an imported form...
Gone Phishing For The Holidays
Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...
fuerteventura-alternativ.de XSS vulnerability
Vulnerable URL: https://www.fuerteventura-alternativ.de/en/Greeting-cards/Landscapes-and-towns/Landscapes-and-towns.html?page=ecardform=05betancuria.jpg%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22name=email=name=email= Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
Easter Holiday Phishing Scams and Malware Campaigns
As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: unsolicited shipping notifications that may actually be scams by attackers to solicit personal information phishing scams, electronic greeting cards that may contain...
Draw Card Greeting Doodle Wish - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Draw Card Greeting Doodle Wish published at the 'play' market has multiple vulnerabilities...
New Year Greeting Cards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application New Year Greeting Cards published at the 'play' market has multiple vulnerabilities...
The Card Shop : Greeting Cards - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application The Card Shop : Greeting Cards published at the 'play' market has multiple vulnerabilities...
Greeting Cards All Occasions - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Greeting Cards All Occasions published at the 'play' market has multiple vulnerabilities...
New Year 2016 Greeting Cards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application New Year 2016 Greeting Cards published at the 'play' market has multiple vulnerabilities...
New Year Greeting Cards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application New Year Greeting Cards published at the 'play' market has multiple vulnerabilities...
Wordpress Infocus2 Theme Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Title : Wordpress Infocus2 Theme Arbitrary File Download Vulnerability Author : KillerX Date : 5/1/2015 KillerX Facebook : http://www.facebook.com/xXalreshyXx Ask : http://ask.fm/ALRESHY Twitter : https://twitter.com/killerx00x Email :...
Greeting card 1.1 - SQL Injection Vulnerability
No description provided by source...
greeting card Remote Upload Vulnerability
No description provided by source. Exploit Title: greeting card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version: 2004/2008 Tested on: Linux/unix CVE : if exists Code : N/A Email : [email protected] Mr.Benladen cr3w Dork : Send amazing greetings to yo...
Wordpress Theme Fusion Arbitrary File Download Vulnerability
This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Fusion Arbitrary File Download Vulnerability Author : Aloulou Date...