169 matches found
New EOL QIDs for Microsoft Windows 7 and 2008/R2
Qualys Vulnerability Signature, version 2.4.815-2, will include EOL QIDs detections for end-of-life software for Windows 7, Windows 2008, and Windows 2008 R2. Customers will be able to scan the QIDs shown below using Qualys Vulnerability Management VM: QID 105859 - EOL/Obsolete Operating System:...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
PT-2019-14419 · WordPress · Icegram Plugin
Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...
The App Creeping on Your IG Location, Jakarta’s Insurance Crisis, and More News
Catch up on the most important news from today in two minutes or less...
ig-passivhaus.de XSS vulnerability
Open Bug Bounty ID: OBB-698030 Description| Value ---|--- Affected Website:| ig-passivhaus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
ig-bac.de XSS vulnerability
Open Bug Bounty ID: OBB-660319 Description| Value ---|--- Affected Website:| ig-bac.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ig-sinnersdorf.de XSS vulnerability
Open Bug Bounty ID: OBB-637374 Description| Value ---|--- Affected Website:| ig-sinnersdorf.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Human Followers for IG Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Human Followers for IG Prank published at the 'play' market has multiple vulnerabilities...
Followers Master for IG Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Followers Master for IG Prank published at the 'play' market has multiple vulnerabilities...
Get Followers for IG - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Get Followers for IG published at the 'play' market has multiple vulnerabilities...
IG Metall InfoApp - External URLs, Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application IG Metall InfoApp published at the 'play' market has multiple vulnerabilities...
IG Trading - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application IG Trading published at the 'play' market has multiple vulnerabilities...
IG BCE Schichtkalender BASF SE - MIT license, WebView JavaScript enabled, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application IG BCE Schichtkalender BASF SE published at the 'play' market has multiple vulnerabilities...
Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page
KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...
Cross site scripting
Cross-site scripting XSS vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2015-2850
Cross-site scripting XSS vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2015-2849
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter...
CVE-2015-2850
The CVE-2015-2850 issue affects ANTlabs InnGate firmware (IG 3100 and InnGate 3.01 E, 3.10 E, 3.10 M, SG 4, SSG 4). The vulnerability is a Cross-Site Scripting (XSS) in the index-login.ant page, exploitable via the msg parameter. Root cause is improper input handling that allows injected web scri...
CVE-2015-2849
Summary (CVE-2015-2849) : The ANTlabs InnGate firmware (IG3100, InnGate 3.01 E, 3.10 E, 3.10 M, SG 4, SSG 4) contains a SQL injection vulnerability in the main.ant page. The issue arises from the ppli URL parameter; when using HTTPS, a remote attacker can induce arbitrary SQL commands on the unde...
CVE-2015-0932
The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on por...