apache-poi: denial of service in HSLFSlideShow via corrupted PPT file

A denial of service flaw was found in the way the HSLFSlideShow class implementation in Apache POI handled certain PPT files. A remote attacker could submit a specially crafted PPT file that would cause Apache POI to hang indefinitely...

UBUNTU-CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

PT-2016-4404

Name of the Vulnerable Software and Affected Versions OpenStack Image Service Glance versions prior to 2015.1.3 kilo OpenStack Image Service Glance versions 11.0.x prior to 11.0.2 liberty Description The issue allows remote authenticated users to tamper with images, potentially compromising the...

Show and Tell - Demo - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Show and Tell - Demo published at the 'play' market has multiple vulnerabilities...

Mermaid Fashion Show Free - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Fashion Show Free published at the 'play' market has multiple vulnerabilities...

Shapes & Colors Music Show - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Shapes & Colors Music Show published at the 'play' market has multiple vulnerabilities...

Baby Show by BabyBus - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Baby Show by BabyBus published at the 'play' market has multiple vulnerabilities...

American Fireworks Show - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application American Fireworks Show published at the 'play' market has multiple vulnerabilities...

TV Show Quizz - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TV Show Quizz published at the 'play' market has multiple vulnerabilities...

Hi Guess the TV Show: Pic Quiz - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Hi Guess the TV Show: Pic Quiz published at the 'play' market has multiple vulnerabilities...

Horse Jump Show - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Horse Jump Show published at the 'play' market has multiple vulnerabilities...

Super Model Salon: Family Show - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Super Model Salon: Family Show published at the 'play' market has multiple vulnerabilities...

Mini Video Maker - Slide Show - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mini Video Maker - Slide Show published at the 'play' market has multiple vulnerabilities...

Fireworks VR Show on Cardboard - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Fireworks VR Show on Cardboard published at the 'play' market has multiple vulnerabilities...

Interview Benjamin Kunz Mejri - TechTalk Cairo TV

Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...

Interview Benjamin Kunz Mejri - TechTalk Cairo TV

Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...

dgmcwhzf.com XSS vulnerability

Vulnerable URL: http://www.dgmcwhzf.com/ts/MailShow.asp?deptname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

edmontonfallhomeshow.com Open Redirect vulnerability

Vulnerable URL: http://www.edmontonfallhomeshow.com/Click.aspx?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:23 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 270330...

foreman: reports show/destroy not restricted by host authorization

A flaw was discovered where Satellite failed to properly enforce permissions on the show and delete actions for reports. An authenticated user with show or delete report permissions could use this flaw to view or delete any reports held in Foreman...

xpshop网店系统 xpshop.webui.Show SQL 注入

漏洞位置xpshop.webui.Show: private void GetImgstring pids ProductDB productDB = new ProductDB; DataTable thumbnailImg = productDB.GetThumbnailImgpids; thumbnailImg.TableName = "Products"; base.Response.WriteXpShopJson.DtToJSONthumbnailImg; 这里是问题函数，我就不写怎么跟进来的，就是pageload,等下直接用payload测试就好了，官网demo的。...