The vulnerability of the Zyxel ZLD operating system allows a remote attacker to escalate their privileges.

The Zyxel ZyWALL USG 300 network firewall/routing system has a bug during the default password change process. As a result, the Quagga and Zebra processes continue to respond to requests made with the old password...

FantasyTote: Insecure password change mechanism may lead to full account takeover

Description: The password change mechanism which is located at https://www.fantasytote.com/users/edit is insecure as there is no old password field deployed in it. Any unauthorized user can access the account and can change the password directly without knowing the old password. The current...

WordPress OPS Old Post Spinner 插件任意文件包含漏洞

No description provided by source...

SUSE-SU-2016:1457-1 Security update for cyrus-imapd

Previous versions of cyrus-imapd would not allow its users to disable old protocols like SSLv1 and SSLv2 that are unsafe due to various known attacks like BEAST and POODLE. https://bugzilla.cyrusimap.org/showbug.cgi?id=3867 remedies this issue by adding the configuration option 'tlsversions' to...

Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal

Overview kml2jsonp.php contained in source code of OldGSIMaps prior to January, 2015 provided by the Geospatial Information Authority of Japan GSI contains a directory traversal vulnerability CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

mediawiki -- multiple vulnerabilities

Mediawiki reports: Security fixes: T122056: Old tokens are remaining valid within a new session T127114: Login throttle can be tricked using non-canonicalized usernames T123653: Cross-domain policy regexp is too narrow T123071: Incorrectly identifying http link in a's href attributes, due to m...

Microsoft Security Intelligence Report: Top Takeaways

Microsoft’s Security Intelligence Report painted a bleak picture when it comes to malware, fraudulent login attempts and the staying power of really old exploits. Key findings in the 198-page biannual report run the gamut illustrating how old threats die hard and what new threats are on the...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-02445)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 50.0.2661.75. A remote attacker can exploit the vulnerability to execute arbitrary code...

PT-2020-12508 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 2.0.0 Description: The issue is related to a stream out-of-bounds seek in the update read synchronize function, which could lead to a later out-of-bounds read. Recommendations: For FreeRDP versions 1.0 through...

Old MacDonald Pet Farm - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Old MacDonald Pet Farm published at the 'play' market has multiple vulnerabilities...

E30 Old Car Parking - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application E30 Old Car Parking published at the 'play' market has multiple vulnerabilities...

Old Vegas Slots - Free Casino - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Old Vegas Slots - Free Casino published at the 'play' market has multiple vulnerabilities...

Old House - Escape - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Old House - Escape published at the 'play' market has multiple vulnerabilities...

Make me Old - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Make me Old published at the 'play' market has multiple vulnerabilities...

The Old Republic™ Security Key - External URLs, Suspicious files, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application The Old Republic™ Security Key published at the 'play' market has multiple vulnerabilities...

New Relic: Old CAPTCHA offers no protection

To rate-limit users, you use an old CAPTCHA method that has been broken for quite a while due to developments in OCR. There are many services that are available to quickly solve these and so it offers no protection. For example, here is one site that offers easy CAPTCHA breaking:...

FreeBSD : PuTTY - old-style scp downloads may allow remote code execution (7f0fbb30-e462-11e5-a3f3-080027ef73ec)

Simon G. Tatham reports : Many versions of PSCP prior to 0.67 have a stack corruption vulnerability in their treatment of the 'sink' direction i.e. downloading from server to client of the old-style SCP protocol. In order for this vulnerability to be exploited, the user must connect to a maliciou...

PuTTY - old-style scp downloads may allow remote code execution

Simon G. Tatham reports: Many versions of PSCP prior to 0.67 have a stack corruption vulnerability in their treatment of the 'sink' direction i.e. downloading from server to client of the old-style SCP protocol. In order for this vulnerability to be exploited, the user must connect to a malicious...

Spotify - CSRF & Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...

The vulnerability of the WhatUp Gold monitoring system allows attackers to carry out attacks based on SQL injections.

The vulnerability of the DroneDeleteOldMeasurements implementation in the WhatUp Gold IT-infrastructure monitoring system is related to the lack of verification of the reliability of XML objects’ sequences. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out...