Intel® IPP Cryptography Advisory

Summary: A potential security vulnerability in an Intel® Integrated Performance Primitives IPP Cryptography software library may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26083 Description:...

WordPress Forminator 1.5.4 Cross Site Scripting / SQL Injection

Vulnerability: Unauthenticated Persistent XSS, Blind SQL Injection Affected Software: Forminator Affected Version: 1.5.4 Patched Version: 1.6 CVE: not requested Risk: High Vendor Contacted: 11/25/2018 Vendor Fix: 12/10/2018 Public Disclosure: 02/05/2019 Credit: Tim Coen Unauthenticated Persistent...

Security Bulletin: CICS Transaction Gateway for Multiplatforms

Summary Multiple security vulnerablilities exist in the JREs shipped with CICS TG for client applications. CICS TG itself is not vulnerable to all these risks but client side applications using the CICS TG supplied JREs might be. Vulnerability Details CVEID: CVE-2014-6601 DESCRIPTION: Unspecified...

EE 4GEE Wireless Router EE60_00_05.00_25 XSS / CSRF / Disclosure Vulnerabilities

EE 4GEE wireless router version EE600005.0025 suffers from cross site request forgery, cross site scripting, and information disclosure vulnerabilities. EE 4GEE Wireless Router - Multiple Security Vulnerabilities Advisory ------------------------------------------------- Hardware Version/Model:...

Oxwall 1.7.4 Cross Site Request Forgery

Advisory ID: HTB23266 Product: Oxwall Vendor: http://www.oxwall.org Vulnerable Versions: 1.7.4 and probably prior Tested Version: 1.7.4 Advisory Publication: July 1, 2015 without technical details Vendor Notification: July 1, 2015 Vendor Patch: September 8, 2015 Public Disclosure: October 22, 201...

112 ipTIME Remote Code Execution Vulnerabilities

Many 112 ipTIME routers / modems / firewalls suffer from a remote root code execution vulnerability. Title: 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x00.txt.asc Date published:...

Authentication Flaw in PayPal mobile API Allows Access to Blocked Accounts

.jpg Payment services provider PayPal is vulnerable to an authentication restriction bypass vulnerability, which could allow an attacker to bypass a filter or restriction of the online-service to get unauthorized access to a blocked users’ PayPal account. The security vulnerability actually resid...

Blue Coat Reporter 9.1.x / 9.2.x Directory Traversal

Blue Coat Reporter Unauthenticated Directory Traversal ================================================================================= PUBLIC RELEASE My gift to Ekoparty Security Conference 2011 @ Argentina What a great event! 21/Sept/2011 PUBLIC RELEASE Vulnerability Information...

Fedora Update for firefox FEDORA-2008-6518

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Immunity Canvas: SPEECH

Name| speech ---|--- CVE| CVE-2007-2222 Exploit Pack| CANVAS Description| Microsoft Speech API 4v MS07-033 Notes| CVE Name: CVE-2007-2222 VENDOR: Microsoft MSADV: MS07-033 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS07-033.mspx CVE URL...

Immunity Canvas: STINKY_DEBUG

Name| stinkydebug ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Debug Notes| CVE Name: CVE-2005-3252 VENDOR: Stinky Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date...