CVE-2022-24308: Undefined Security Weakness

Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process...

Mozilla: Time-of-check time-of-use bug when verifying add-on signatures

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified, and Firefox...

This Stalkerware Delivers Extra-Creepy Features

Researchers are sending up a red flag over the distribution of an aggressive stalkerware app called Monitor Minor. In a report released Monday, researchers said the Android version of the app gives stalkers near absolute control of targeted devices, going so far as allowing them to capture the...

Design/Logic Flaw

ImpressCMS 1.3.10 has XSS via the PATHINFO to htdocs/install/index.php, htdocs/install/pagelangselect.php, or htdocs/install/pagemodcheck.php...

JDK: unspecified vulnerability fixed in 8u171 and 10.0.1 (Install)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

Sandstorm Server-Side Request Forgery Vulnerability Vulnerability

Sandstorm is a personal cloud platform. The platform features file storage, application management, task and project management, and more. A server-side request forgery vulnerability exists in the install application process in versions prior to Sandstorm build 0.203. A remote attacker can exploi...

ShopEx Single <= 4.5.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cro...

X7CHAT 1.3.6b - Add Admin Exploit

No description provided by source. + Author : d4rk-h4ck3r + Email : [email protected] + Site : www.vbspiders.com/vb + Team : Tunisian Security TeaM + Dork : powered by x7 chat 1.3.6b Exploit-DB Notes Vendor has already addressed this issue and even provided a solution in Docs/INSTALL.txt: After finishing...

CVE-2012-2284: Undefined Security Weakness

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

ShopEx Single 4.5.1 - Multiple Vulnerabilities

ShopEx Single 4.5.1 - Multiple Vulnerabilities Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested...

ShopEx <= Single V4.5.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ ShopEx = Single V4.5.1 Multiple Vulnerabilities ================================================ Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1...

ShopEx Single 4.5.1 - Multiple Vulnerabilities

Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cross Site Scripting Cross-Site...

coolkey security and bug fix update

1.1.0-5 - 1777 is not octal and does not set the correct bits should be 01777 1.1.0-4 - fix cache location to be more secure 1.1.0-3 - replace the install stuff 1.1.0-2 - Back out RHEL-4 version of spec from CVS, add pcsc-lite-lib requires. 1.1.0-1 - Pick up lates release...

netscape.directory.server.4.txt

Date: Mon, 03 May 1999 08:45:25 -0400 From: "Bobby, Paul" To: "'[email protected]'" Subject: bug/Netscape-DirectoryServer4 After installing Netscape's Directory Server 4 for Solaris, one of the final options is to remove a file called 'install.inf' which the install process claims coul...