2804 matches found
KLA10852 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code, spoof user interface, bypass security restrictions, conduct cross-site scripting or read local...
WordPress N-Media file uploader Plugin <= 1.5 - Minor Security Improvements
This plugin is prone to multiple storess XSS vulnerabilities. Solution Update the plugin...
Moxa Device Server Web Console Authentication Bypass Vulnerability
The Moxa Device Server Web Console 5232-N is a serial Ethernet device from Moxa. An authentication bypass vulnerability exists in the Moxa Device Server Web Console 5232-N version. An attacker could use this vulnerability to gain access to change settings and data on the target device...
Google finally announces Android N's name and It's not Nutella
No, it's not Nutella. Google has finally announced the official name of the latest version of its Android mobile software, codenamed Android N: "Nougat." Yes, the next version of sugary snack-themed Android and the successor to Android Marshmallow will now be known as Android Nougat, the company...
IBM Security QRadar Incident Forensics Unauthorized Access Vulnerability
IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and repair network security vulnerabilities. An unauthorized access vulnerability exist...
IBM QRadar SIEM and Security QRadar Incident Forensics Path Traversal Vulnerabilities
IBM QRadar SIEM and IBM Security QRadar Incident Forensics are both products of IBM USA. The former is a suite of solutions that utilize security intelligence to protect assets and information from advanced threats; the latter is a suite of security forensic investigation software. A path travers...
IBM QRadar SIEM Sensitive Information Access Vulnerability
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A sensitive...
Cisco RV110W, RV130W, and RV215W Routers Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...
n-g-k.biz XSS vulnerability
Vulnerable URL: http://www.n-g-k.biz/?page=meropr54=477%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13725313 VIP website...
Easy RM to MP3 Converter 2.7.3.700 - .m3u File (Universal ASLR + DEP Bypass)
Easy RM to MP3 Converter 2.7.3.700 - .m3u File Universal ASLR + DEP Bypass Exploit Title: Easy RM to MP3 Converter 2.7.3.700 .m3u File BoF Exploit with Universal DEP+ASLR bypass Date: 2016-06-12 Exploit Author: Csaba Fitzl Vendor Homepage: N/A Software Link:...
Threat Outbreak Alert RuleID23010: Email Messages Distributing Malicious Software on May 22, 2016
Medium Alert ID: 46335 First Published: 2016 May 23 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23010 may contain the following files: Name | Size...
n-e-r-v-o-u-s.com XSS vulnerability
Vulnerable URL: http://n-e-r-v-o-u-s.com/shop/product.php?code=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Moxa Device Server Web Console Authorization Bypass Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified an authorization bypass vulnerability in Moxa’s Device Server Web Console. Moxa has indicated the NPort 5232-N was discontinued in 2012 and has produced recommendations to mitigate this vulnerability. This vulnerability could be exploited...
Knights N Squires - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Knights N Squires published at the 'play' market has multiple vulnerabilities...
Cops N Robbers 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Cops N Robbers 2 published at the 'play' market has multiple vulnerabilities...
Block Force - Cops N Robbers - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Block Force - Cops N Robbers published at the 'play' market has multiple vulnerabilities...
Cops N Robbers - FPS - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Cops N Robbers - FPS published at the 'play' market has multiple vulnerabilities...
n-tv Nachrichten - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application n-tv Nachrichten published at the 'play' market has multiple vulnerabilities...
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...