PT-2018-19079

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Match Clone Script version 1.0.4 Description The issue concerns a problem where an attacker can inject malicious code via the search field. This is related to the "View Search By Id" screen, accessible through the searchbyid.p...

Open-Xchange: [XSS] Pasting bootstrap in mail compose

Hi. No filter for bootstrap data attributes. data-target allow any html, e.g.: - " href="" collapse - " href="" dropdown - " href="" modal Steps: 1. Create page with this code best example with dropdown, you can use my template https://secator.com/ox/bootstrap.html 2. Ctrl+A select all, Ctrl+C co...

videoproductionphoenix.com XSS vulnerability

Open Bug Bounty ID: OBB-590857 Description| Value ---|--- Affected Website:| videoproductionphoenix.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vulnerability in Robots Can Lead To Costly Ransomware Attacks

CANCUN, Mexico – A vulnerability in Softbank Robotics’ NAO and Pepper robots can lead to costly ransomware attacks that could cause robots deployed in businesses to stop working, curse at customers, or even perform violent movements. The vulnerability was disclosed at Kaspersky Lab’s Security...

PT-2017-15144

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. Specifically, it involves the event title parameter in the "admin/event...

PT-2017-15137

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is with the edit id parameter in the "admin/slider...

PT-2017-15142

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. Specifically, it affects the comm id parameter in the admin/caste...

PT-2017-15113

Name of the Vulnerable Software and Affected Versions Vanguard Marketplace Digital Products PHP affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the phps query parameter in the "/search" AP...

PT-2017-15116

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the title...

PT-2017-15102

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code into the website. This is possible due to the lack of proper input...

PT-2017-15093

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Responsive Realestate Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the gplu...

PT-2017-14863

Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...

PT-2017-14040

Name of the Vulnerable Software and Affected Versions Rate Me version 1.0 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to the lack of proper input validation in the id field when a rate action is performed. Recommendation...

Microsoft Windows Device Guard Local Security Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security bypass vulnerability in the implementation of Microsoft Windows Device Guard could allow an attacker to inject malicious code into a Windows PowerShell session...

PT-2017-3124

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607, and 1703 Windows Server 2016 Description The issue is related to how Microsoft Device Guard handles Windows PowerShell sessions, allowing a security feature bypass. This is due to insufficient...

Seven More Chrome Extensions Compromised

The number of compromised Chrome browser extensions is growing beyond the initial Aug. 1 hijacking of the OCR add-on called Copyfish. Added to list are seven additional legitimate Chrome Extensions that attackers took over and used to manipulate internet traffic and web-based ads, according to...

Joomla! cross-site scripting vulnerability (CNVD-2017-26330)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.7.4. The vulnerability stems from the program's failure to adequately...

CVE-2017-0215

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

CVE-2017-0173: Undefined Security Weakness

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

CVE-2017-0218: Undefined Security Weakness

Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Poli...