Update Rollup 8 for System Center 2012 Data Protection Manager SP1

Update Rollup 8 for System Center 2012 Data Protection Manager SP1 This article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 Data Protection Manager DPM Service Pack 1 SP1. Additionally, this article contains the installation instructions for Update Roll...

trinketsandtrash.org XSS vulnerability

Vulnerable URL: https://trinketsandtrash.org/detail.php?itemnumber=213662'"--!...

net-qp.com XSS vulnerability

Vulnerable URL: https://www.net-qp.com/item/detail.php?Item=2710809=23=='"--!...

heartlandjewelry.net XSS vulnerability

Vulnerable URL: http://heartlandjewelry.net/item-large.asp?pic='"--!confirmOPENBUGBOUNTY...

CVE-2016-7462

The Suite REST API in VMware vRealize Operations aka vROps 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization...

Mail.ru: [allods.mail.ru] Cross-Site Request Forgery (Add-Item)

Hi, I found that there is no anti-csrf while adding an item for '/media.php' in allods.mail.ru, from 'https://allods.mail.ru/media.php?do=additem&section=2' since there was no anti-csrf token, there was still an extra layer of security for csrf which I had to bypass! More Details: The upload...

MariaDB Server 10.2.x < 10.2.2 Multiple DoS

Binary data 9689.prm...

zeemaps.com XSS vulnerability

Vulnerable URL: http://www.zeemaps.com/view?group=1=...

IBM WebSphere Portal Security Bypass Vulnerability

IBM WebSphere Portal is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 23 Update: kf5-kitemmodels-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item models...

[SECURITY] Fedora 23 Update: kf5-kitemviews-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item views...

[SECURITY] Fedora 24 Update: kf5-kitemviews-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item views...

[SECURITY] Fedora 24 Update: kf5-kitemmodels-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item models...

TeamPass SQL Injection Vulnerability (CNVD-2016-04930)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. TeamPass has a SQL injection vulnerability in sources/items.series.php. In a "sendemail" request, when the condition "$POST'cat' == "sharethisitem"" is successful, the POST parameter "id" is unescaped, which can lead to SQL...

UBUNTU-CVE-2016-2335

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service out-of-bounds read or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file...

Tiny Tiny RSS SQL Injection Vulnerability

A blind injection vulnerability exists in $itemid in Tiny Tiny RSS processcategoryorder. An attacker is able to connect to the library database and execute database statements...

Secure Item Hub Arbitrary File Upload Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. Secure Item Hub has an arbitrary file upload vulnerability that can be exploited by remote attackers to upload files and obtain sensitive information...

Secure Item Hub Local Command Injection Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. A local command injection vulnerability exists in Secure Item Hub, which could allow an attacker to execute malicious attack requests via persistent injection of script code...

Secure Item Hub Persistent Input Validation Vulnerability

Secure Item Hub app is able to transfer files between iphone or ipad and computer on the same wifi network. A persistent input validation vulnerability exists in Secure Item Hub, which could allow a remote attacker to inject malicious persistent script code on the application side of the mobile a...

CVE-2015-8606

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Locale or 2 FailedLoginCount parameter to admin/security/EditForm/field/Members/item/new/ItemEditForm...