1228 matches found
SAIA (Software Gestion Documental) SQL Injection & XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: SAIA Software Gestion Documental SQL Injection & XSS Vulnerability D0rk: intext:"Todos los derechos reservados CERO K" Exploit Author: n4pst3r Vendor Homepage: https://www.cerok.co/ Tested on: Windows 10, Debian 9 ...
k-live.net Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting k-live.net website and its users. Following coordinated an...
The vulnerability of the K7TSHlpr.dll module in antivirus protection tools such as K7 Antivirus Premium, K7 Total Security, and K7 Ultimate Security allows attackers to escalate their privileges.
The vulnerability of the K7TSHlpr.dll module in antivirus protection tools such as K7 Antivirus Premium, K7 Total Security, and K7 Ultimate Security is related to errors in inter-process communication. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
k-9foto.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1096565 Security Researcher geeknik Helped patch 8675 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting k-9foto.ru website and its...
New SchoolSafety.gov Provides Cyber Guidance for K-12 Schools
The Federal School Safety Clearinghouse just launched its website: SchoolSafety.gov. This website—a collaboration between the Department of Homeland Security and the U.S. Departments of Education, Justice, and Health and Human Services—features a fact sheet on Cyber Safety Considerations for K-12...
Oski Data-Stealing Malware Emerges to Target North America, China
An emergent and effective data-harvesting tool dubbed Oski is proliferating in North America and China, stealing online account credentials, credit-card numbers, cryptowallet accounts and more. Oski, likely a Finnish or Nordic variant of the word Oska, meaning “Viking warrior or god” in Samoan,...
Police Surveillance Tools from Special Services Group
Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...
CVE-2020-6756
languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows unauthenticated attackers to remotely execute code via the lang parameter...
CVE-2020-6758
The CVE-2020-6758 entry corresponds to a cross-site scripting (XSS) vulnerability in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version), specifically in Option/optionsAll.php, exploitable through the ContentFrame parameter. This is confirmed across multiple connected documents (Red Hat, C...
Magecart Hits Parents and Students via Blue Bear Attack
Blue Bear Software, an administration and e-commerce platform for K-12 schools and other educational institutions, is warning its customers that it has suffered a Magecart attack. Blue Bear’s platform enables management of school accounting, student fees and online stores. In a letter to those...
All K Song has a dll hijacking vulnerability
All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...
k-resin1.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1005548 Security Researcher metamorfosec Helped patch 1959 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting k-resin1.com website...
k-systemy.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1005261 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting k-systemy.ru website and i...
k-addicts.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-987173 Security Researcher Faizanmark Helped patch 77 vulnerabilities Received 6 Coordinated Disclosure badges Received 58 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting k-addicts.net website and...
kcm_colors, kde, kdeclassic, kdelibs, kgreeter, khotkeys, kinfocenter, kmag, kmenuedit, ksysguard, ksysguardd, kwin, libkworkspace, oxygen, plasma, qt, virtuoso security update
CentOS Errata and Security Advisory CESA-2019:2141 An update for kde-workspace, kde-settings, kdelibs, kmag, and virtuoso-opensource is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring...
Congratulations to our Query of the Month Winner for June 2019!
Last month, we launched our Query of The Month competition, which recognizes the top community-shared query that provides value to other Osquery users. To determine the query of the month, our team selects the community-shared query that has the most engagement or helps solve an important problem...
The vulnerability of the “Blockhost – Network K” information protection software lies in the lack of checks for the integrity of uploaded libraries, allowing a perpetrator to execute arbitrary code.
The vulnerability of the “Blockhost – Network K” information protection software is related to the lack of checks for the integrity of the libraries being loaded. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary code with privileges of...
The vulnerability of the PrintControl information protection software “Blockhost – Network K” lies in the lack of checks for the integrity of uploaded libraries, allowing a perpetrator to execute arbitrary code.
The vulnerability of the PrintControl information protection software “Blockhost – Network K” lies in the lack of checks for the integrity of the libraries being loaded. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary code with privileges of...
WordPress Virim plugin <= 0.4 - Unauthenticated Object Injection vulnerability
Unauthenticated Object Injection vulnerability found by Magnus K. Stubman in WordPress Virim plugin versions = 0.4. Solution 27 May 2019 - This plugin was closed and is no longer available for download...
