Reminders - Task reminder app - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Reminders - Task reminder app published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 23 Update: gnome-photos-3.18.3-1.fc23

Photos, like Documents, Music and Videos, is one of the core GNOME applications meant for find and reminding the user about her content...

SRC-2016-0016 : ATutor LMS password_reminder ‘UPDATE’ Type Juggling Authentication Bypass Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to bypass the authentication mechanism on vulnerable installations of ATutor. The specific flaw exists in the ‘passwordreminder.php’ script when performing an password reset. The code uses a loose comparison when comparing the...

Threat Outbreak Alert RuleID20211: Email Messages Distributing Malicious Software on March 8, 2016

Medium Alert ID: 42781 First Published: 2015 December 21 15:25 GMT Last Updated: 2016 March 9 14:08 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20211 an...

Threat Outbreak Alert RuleID18929: Email Messages Distributing Malicious Software on March 12, 2016

Medium Alert ID: 41699 First Published: 2015 October 26 13:44 GMT Last Updated: 2016 March 14 12:26 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18929 a...

FreeBSD : remind -- buffer overflow with malicious reminder file input (b55ecf12-5d98-11e5-9909-002590263bf5)

Dianne Skoll reports : BUG FIX: Fix a buffer overflow found by Alexander Keller. The bug can be manifested by an extended DUMP command using a system variable that is a special variable whose name begins with '$' %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Page2Flip 2.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-027 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Cross-Site Scripting...

Page2Flip 2.5 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-028 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Cross-Site Scripting...

remind -- buffer overflow with malicious reminder file input

Dianne Skoll reports: BUG FIX: Fix a buffer overflow found by Alexander Keller. The bug can be manifested by an extended DUMP command using a system variable that is a special variable whose name begins with '$'...

WordPress WPML Plugin <= 3.1.8 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the "target" parameter in a reminderpopup action to the default URI. Solution Update the plugin...

WordPress plugin WPML cross-site scripting vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. A cross-site scripting vulnerability exists in the WordPress plugin WPML, which allows remote attackers to inject arbitrary web script or HTML via the reminderpop...

Threat Outbreak Alert RuleID11722: Email Messages Distributing Malicious Software on September 26, 2014

Medium Alert ID: 35852 First Published: 2014 September 26 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11722 may contain the following files: Name ...

USN-2290-1: Linux kernel vulnerabilities

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Salva Peiró discovered an information leak in the Linux kernel's media- device...

ATutor 1.5.1 Password_Reminder.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14831/info ATutor is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

ATutor 1.5.x password_reminder.php forgot Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18857/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

Threat Outbreak Alert: Fake Parking Charge Payment Notice Email Messages on May 15, 2014

Medium Alert ID: 34243 First Published: 2014 May 15 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parking violation payment notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bill Notice Email Messages on February 11, 2014

Medium Alert ID: 32831 First Published: 2014 February 12 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice reminder notification for the recipient. The text in the email message attempts to convince the...

RedAxScript v1.1 <= Multiple Blind SQL Injection Vulnerabilities

RedAxScript suffer from multiple SQL Injection Usage Info POST Inject via HTTP headers attack's or HTTP debugger, HackBar / or use any toolkit like sqlmap, sql-ninja etc.. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

Threat Outbreak Alert: Fake Payment Reminder Notification Email Messages on November 24, 2013

Medium Alert ID: 31877 First Published: 2013 November 25 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a payment reminder notification for the recipient. The text in the email message attempts to...

CVE-2013-2315

data/class/pages/forgot/LCPageForgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request...