10785 matches found
GU Kochen Plus - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GU Kochen Plus published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2016-1646
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...
Mozilla Firefox and Firefox ESR Graphite 2 Code.cpp File Denial of Service Vulnerability
Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a set of enterprise-class open source system monitoring tools written in Python, using the Django framework , it is through a third-party tools or plug-ins for data collection ,...
MGASA-2016-0069 Updated gtk+2.0 packages fix CVE-2013-7447
Updated gtk+2.0 packages fix security vulnerability: Due to a logic error, an attempt to allocate a large block of memory fails in gdkcairosetsourcepixbuf, leading to a crash of the app that called it, for example, eom CVE-2013-7447...
Shopify: CSRF on https://shopify.com/plus
Hello. To reproduce this CSRF, visit https://www.shopify.com/plus?insppingurln=https://example.com/%23 Will be sent this post request on example.com: POST https://example.com/ HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:44.0 Gecko/20100101 Firefox/44.0 Accept: application/jso...
CVE-2015-7909
Stack-based buffer overflow in Hospira Communication Engine CE before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port...
Oracle Outside In 8.5.2 contains multiple stack buffer overflows
Overview Oracle Outside In versions 8.5.2 and earlier contain stack buffer overflow vulnerabilities in the parsers for WK4, Doc, and Paradox DB files, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of...
Rockwell Automation /Allen-Bradley PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/ , PVPlus 6 弱口令
No description provided by source...
Netcomm Wireless NB1300 Plus 4 (Netcomm Firmware), NP803N (Netcomm Firmware) 弱口令
No description provided by source...
WordPress Auto ThickBox Plus插件跨站脚本漏洞
No description provided by source...
Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow
Notepad++ NPPFtp Plugin 0.26.3 - Buffer Overflow Title : Notepad ++ NPPFtp Plugin Buffer Overflow Date : 19/12/2015 Author : R-73eN Tested on : NPPFtp 0.26.3 Latest Version Software : http://sourceforge.net/projects/nppftp/ Vendor : https://notepad-plus-plus.org/ | | / | / | / \ | | | || ' | | /...
ManageEngine ServiceDesk Plus 9.1 LFI
Local file include vulnerability in ManageEngine ServiceDesk Plus Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
WordPress Auto ThickBox Plus Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Auto ThickBox Plus is one of the thumbnail plugins used to automate the implementation of ThickBox. A cross-site scripting...
plus-sat83.org Open Redirect vulnerability
Vulnerable URL: http://www.plus-sat83.org/redirect-to/?redirect=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.12.2015 Latest check for patch:| 21.12.2015 16:07 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
p++BBS vulnerable to cross-site scripting
Overview p++BBS provided by Let's PHP! contains a stored cross-site scripting vulnerability CWE-79. Koki Takahashi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on the...
phpMyChat-Plus 1.94-b8 - SQL Injection Vulnerability
phpMyChat-Plus 1.94-b8 - SQL Injecti0n Vulnerability ===================================================== phpMyChat-Plus 1.94-b8 - SQL Injecti0n Vulnerability ===================================================== Exploit Title: phpMyChat-Plus 1.94-b8 SQL Injecti0n Vulnerability SQLMAP ! Date:...
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)
The auto-thickbox-plus WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/auto-thickbox-plus/download.min.php?file=%3Cscript%3Ealert%281%29%3C/script%3E...
WordPress Auto ThickBox Plus Plugin <= 1.9 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)
The auto-thickbox-plus WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/auto-thickbox-plus/download.min.php?file=%3Cscript%3Ealert%281%29%3C/script%3E...