Cisco AnyConnect Profile Editor XML External Entity Injection Vulnerability

A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, local attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE entries when...

MyBB 1.8.6 - Cross-Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 01/29/2016 Disclosed...

Google Store Cross Site Request Forgery

+Exploiy Title: Google Store Multiple XSRF Security Vulnerabilities +Date: 26\08\2011 +Author: C4SS!0 G0M3S +Vendor Link: https://www.google-store.com Add User First Name: Last Name: E-mail Address: Company: Address: Post Code: City: Telephone: Fax: /...