elizabetharden.com XSS vulnerability

Vulnerable URL: https://www.elizabetharden.com/on/demandware.store/Sites-ElizabethArden-Site/default/Search-Show?q=sas'"--!...

ldwarf.ipac.caltech.edu XSS vulnerability

Vulnerable URL: http://ldwarf.ipac.caltech.edu/jpgraph-2.2/src/Examples/show-example.php?target=dateaxisex4.phpKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

UBUNTU-CVE-2015-0854

App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action...

DEBIAN-CVE-2015-0854

App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action...

CVE-2015-0854

Summary (CVE-2015-0854): The Shutter screenshot tool is affected up to version 0.93.1. The vulnerability resides in App/HelperFunctions.pm where the image name is mishandled during the “Show in Folder” action, allowing a user-assisted remote attacker to execute arbitrary commands. This is trigger...

SQL Injection Vulnerability in Taiwan Yicheng Web Design Company's Website Building System

Yee Seng Technology website building system is a content management system template developed by Yee Seng Technology in Taiwan. A SQL injection vulnerability exists in the num parameter in the show.php page of the ArtShing Technology website builder system, which can be exploited by attackers to...

SQL Injection Vulnerability in ShowAjaxOptions Function of Tibco Call Center System

The core of the Tibco call center system is a communication-based enterprise internal and external communication system. A SQL injection vulnerability exists in the showAjaxOptions function of the Tibco Call Center System. Vulnerability file: /userweb/php/index/Outbound.class.php, exploit: UNION...

Arbitrary File Download Vulnerability in ShowDownload Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showDownload function of the Tibco Call Center System. The vulnerability file is: /userweb/php/index/log.class.php, whic...

DEBIAN-CVE-2016-7042

The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service stack memory corruption and panic by...

Linux kernel local denial of service vulnerability (CNVD-2016-09457)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'prockeysshow' function in the security/keys/proc.c file in Linux kernel versions 4.8.2 and earlier, which stems from a program...

Unable to Delete Credentials

Challenge When attempting to delete credentials from the credentials manager, a message box states: Unable to delete credentials because they are currently in use. See details for more info. Cause You cannot delete a record that is already used for any component in the backup infrastructure...

Yelp: Requesting Show CheckIn Alert for Non Friend User

During analysis it was observed that I was able to request "ShowCheck In Alert" Request for non friend user. I performed this application from Mobile application. Below are the steps we have to carry to achieve this: Logged in to Yelp Mobile Application Visit any added friend and click on...

SQL Injection Vulnerability in zzcms /dl/show.php

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. The latest product version of zzcms has SQL injection vulnerability, the vulnerability trigger point in /dl/show.php, the attacker can use the vulnerability to obtain sensitive...

apache-poi: denial of service in HSLFSlideShow via corrupted PPT file

A denial of service flaw was found in the way the HSLFSlideShow class implementation in Apache POI handled certain PPT files. A remote attacker could submit a specially crafted PPT file that would cause Apache POI to hang indefinitely...

PT-2016-4404

Name of the Vulnerable Software and Affected Versions OpenStack Image Service Glance versions prior to 2015.1.3 kilo OpenStack Image Service Glance versions 11.0.x prior to 11.0.2 liberty Description The issue allows remote authenticated users to tamper with images, potentially compromising the...

UBUNTU-CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

Show and Tell - Demo - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Show and Tell - Demo published at the 'play' market has multiple vulnerabilities...

Mermaid Fashion Show Free - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Fashion Show Free published at the 'play' market has multiple vulnerabilities...

Shapes & Colors Music Show - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Shapes & Colors Music Show published at the 'play' market has multiple vulnerabilities...

Baby Show by BabyBus - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Baby Show by BabyBus published at the 'play' market has multiple vulnerabilities...