Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-44525)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in the thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h file for...

Fedora Update for jackson-jaxrs-providers FEDORA-2019-df57551f6d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: jackson-jaxrs-providers-2.9.8-1.fc29

This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile binary JSON, XML, CBOR another kind of binary JSON, YAML...

SQL Injection Vulnerability in Frog Smile Online Business Management Software of Shenzhen Kewe Technology Co.

Frog Smile Online Business Management Software is an online management software based on cloud service model and B/S architecture for all kinds of franchised industries on the Internet platform. Shenzhen Pulse Technology Co., Ltd. Pulse - frog smile online business management software SQL injecti...

smile-store.de XSS vulnerability

Open Bug Bounty ID: OBB-591299 Description| Value ---|--- Affected Website:| smile-store.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

smile-education.co.uk XSS vulnerability

Vulnerable URL: http://www.smile-education.co.uk/index.php?pageid=jobs=test-job-5=13'"55= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9395196 VIP website status:| No Coordinated...

smilecreations.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-292857 Description| Value ---|--- Affected Website:| smilecreations.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Time to Smile!:) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Time to Smile!: published at the 'play' market has multiple vulnerabilities...

Mail.ru: e.mail.ru stored XSS in agent via sticker (smile)

Привет : смотрим скриншот : XSS в сообщениях агента с помощью стикера смайла. Отправка меседжа со стикером и XSS выглядит так: POST https://jim45.mail.ru/message?session=48280&r=18426&sdc=1 HTTP/1.1 Accept: / Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest Referer...

CVE-2014-3697

The CVE-2014-3697 issue affects Pidgin for Windows, where the untar_block function in win32/untar.c allows absolute path traversal via a tar archive’s drive name in a smiley theme. This enables remote attackers to write files to arbitrary locations on the victim system. Public references indicate...

CVE-2009-4738

Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...

Design/Logic Flaw

Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...

PT-2013-1373

Name of the Vulnerable Software and Affected Versions JustSystems Corporation ATOK versions 2006 through 2009 JustSystems Corporation ATOK flat-rate service Just Smile 4 with the ATOK Smile module Description The issue allows physically proximate users to bypass the screen lock and execute comman...

CVE-2009-4738: Undefined Security Weakness

Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...

Facebook Life Smile SQL Injection

Title: ====== Facebook Life Smile - SQL Injection Vulnerability Date: ===== 2012-02-14 References: =========== http://www.Ninja-Sec.com Introduction: ============= The application is currently included and viewable by all facebook users. The service is an external 3rd party application sponsored ...

JVN#57040664 ATOK screen lock bypass vulnerability

ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass vulnerability. Impact An attacker could execute arbitrary code or program with the privileges ...

PNPHPBB2 1.2g - phpbb_root_path Remote File Inclusion

PNPHPBB2 1.2g - phpbbrootpath Remote File Inclusion Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

PNPHPBB2 < 1.2g - 'phpbb_root_path' Remote File Inclusion

Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

CVE-2006-2637

The CVE-2006-2637 entry describes a cross-site scripting (XSS) vulnerability in view.php of TuttoPhp variants Morris Guestbook 1, Pretty Guestbook 1, and Smile Guestbook 1. An attacker can inject arbitrary script/HTML by providing a javascript: URI in the SRC attribute of an IMG element via the p...