10619 matches found
UBUNTU-CVE-2016-10243
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shellescapecommands in the texmf.cnf config file...
Dave's WordPress Live Search <= 4.5 - Reflected Cross-Site Scripting (XSS)
From changelog: "Fixed cross-site scripting vulnerability in unsanitized "tab" parameter on admin pages"...
Live Helper Chat 2.58v Cross Site Scripting Vulnerability
Exploit for php platform in category web applications COMPASS SECURITY ADVISORY https://www.compass-security.com/en/research/advisories/ CSNC ID: CSNC-2017-004 Product: Live Helper Chat 1 Vendor: Live Helper Chat Subject: Cross-Site Scripting - XSS Risk: High Effect: Remotely exploitable Author:...
Live Helper Chat 2.58v Cross Site Scripting
COMPASS SECURITY ADVISORY https://www.compass-security.com/en/research/advisories/ CSNC ID: CSNC-2017-004 Product: Live Helper Chat 1 Vendor: Live Helper Chat Subject: Cross-Site Scripting - XSS Risk: High Effect: Remotely exploitable Author: Sylvain Heiniger [email protected]...
D-Link DCS Cross-Site Forgery Request Vulnerability
D-Link DCS-933L and others are wireless surveillance camera devices from AUO D-Link. A security vulnerability exists in several D-Link DCS cameras. An attacker can exploit the vulnerability with the help of a specially crafted Flash file to retrieve information from Live Feeds or Camera, add new...
CVE-2017-7852
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to , thus accepting requests from any domain. If a...
Cross site request forgery (csrf)
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to , thus accepting requests from any domain. If a...
Kakao TV Live - 카카오 TV 라이브 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Kakao TV Live - 카카오 TV 라이브 published at the 'play' market has multiple vulnerabilities...
PT-2017-17954 · D Link · Dcs-932Lb1 +7
Name of the Vulnerable Software and Affected Versions: D-Link DCS-933L versions prior to 1.13.05 D-Link DCS-5030L D-Link DCS-5020L D-Link DCS-2530L D-Link DCS-2630L D-Link DCS-930L D-Link DCS-932L D-Link DCS-932LB1 Description: The issue allows sites hosting malicious Flash objects to access and/...
Sports TV Channel Live in HD - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sports TV Channel Live in HD published at the 'play' market has multiple vulnerabilities...
FilmOn Free Live TV - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application FilmOn Free Live TV published at the 'play' market has multiple vulnerabilities...
Telugu Live TV,Movies & Shows - Base64 encoded String, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Telugu Live TV,Movies & Shows published at the 'play' market has multiple vulnerabilities...
HD Tv:Mobile Tv,Live Tv&Movie - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application HD Tv:Mobile Tv,Live Tv&Movie published at the 'play' market has multiple vulnerabilities...
MHD TV: MOBILE TV, LIVE TV - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MHD TV: MOBILE TV, LIVE TV published at the 'play' market has multiple vulnerabilities...
Fashionbox Live - Exported components, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Fashionbox Live published at the 'play' market has multiple vulnerabilities...
MVP - Live Sport TV - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MVP - Live Sport TV published at the 'play' market has multiple vulnerabilities...
Live Sports TV - Dangerous filesystem permissions, GPL license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Live Sports TV published at the 'play' market has multiple vulnerabilities...
sport TV Live - Television - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application sport TV Live - Television published at the 'play' market has multiple vulnerabilities...
LIVE-TV - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application LIVE-TV published at the 'play' market has multiple vulnerabilities...
Cricket Live Line - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Cricket Live Line published at the 'play' market has multiple vulnerabilities...