PT-2017-12076

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue arises when ImageMagick processes a crafted file using the convert function, leading to a memory leak in the lite font map function located in coders/wmf.c. Recommendations For ImageMagick...

Huawei HedEx Lite Arbitrary File Download Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. An arbitrary file download vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00. An attacker can exploit this vulnerability to download arbitrary files locally and disclose information...

Huawei HedEx Lite Cross-Site Request Forgery Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A cross-site request forgery vulnerability exists in versions prior to Huawei HedEx Lite V200R006C00. An attacker can exploit this vulnerability with malicious scripts to modify the configuration and interfere with legitimate...

Huawei HedEx Lite Cross-Site Scripting Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A cross-site scripting vulnerability exists in versions prior to Huawei HedEx Lite V200R006C00. A remote attacker can exploit this vulnerability to embed malicious scripts into the device's configuration file and interfere wit...

Huawei HedEx Lite DLL Hijacking Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. A DLL hijacking vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00, which originates from accessing a relative path to call a DLL file during HedEx operation. A remote attacker could exploit this...

Multiple Cross-Site Scripting Vulnerabilities in Splunk Enterprise and Lite

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

CVE-2015-4070

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2015-4070

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2015-4070

CVE-2015-4070: Open redirect vulnerability in Wow Moodboard Lite plugin for WordPress (version 1.1.1.1) affecting the proxyimages function in wowproxy.php. Attackers can redirect users to arbitrary sites via the url parameter, enabling phishing. The provided documents confirm the vulnerability bu...

PT-2017-6728

Name of the Vulnerable Software and Affected Versions Wow Moodboard Lite plugin version 1.1.1.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. This is related to an open redirect vulnerability in...

CVE-2015-4070: URL Redirection to Untrusted Site

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

Clean Master Lite (Boost) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Lite Boost published at the 'play' market has multiple vulnerabilities...

CVE-2016-7843

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file...

CVE-2016-7843

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file...

CVE-2016-7843

CVE-2016-7843 describes a directory traversal vulnerability in MaruUo Factory's AttacheCase family (AttacheCase for Java ≤0.60, AttacheCase Lite ≤1.4.6, AttacheCase Pro ≤1.5.7). The flaw stems from how ATC filenames are processed, allowing a remote attacker to read arbitrary files by crafting an ...

CVE-2016-7843: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of the PPKLite security handler for programs that view and edit PDF files in Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a...

Home Bookkeeping Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Home Bookkeeping Lite published at the 'play' market has multiple vulnerabilities...

Contact Form for WordPress – Ultimate Form Builder Lite plugin <= 1.3.2 - Authenticated Cross-Site Scripting (XSS)

Contact Form for WordPress – Ultimate Form Builder Lite 1.3.2 WordPress plugin and earlier its versions suffers from Authenticated Cross-Site Scripting XSS vulnerability. Patched version 1.3.3 already available. Solution Update plugin to the latest available version at least 1.3.3...

CVE-2016-8776

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection FRP to enter some functional modules without authorization and perform operations to update the Google account...