MS16-097: Description of the security update for Microsoft Graphics Component: August 9, 2016

None None...

Web Solutions products.php parameters of the IDZ SQL injection vulnerability

No description provided by source...

Windows UAC Bypass Hack Leaves Systems Open to Malicious DLLs

Researchers have crafted a stealthy new way of bypassing Windows User Account Controls UAC that opens the door to attacks on targeted systems. According researchers, the bypass technique can fly under the radar of security solutions that monitor for this type of circumvention. The UAC bypass...

zend.com XSS vulnerability

Vulnerable URL: http://www.zend.com/en/solutions/ibm-power-linux?wxw"alert/OPENBUGBOUNTY/...

Symantec Ghost Solutions Suite (GSS) Detection (Windows SMB Login)

Detects the installed version of Symantec Ghost Solutions Suite GSS. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

solutions.oracle.com XSS vulnerability

Open Bug Bounty ID: OBB-164450 Description| Value ---|--- Affected Website:| solutions.oracle.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AWBS 2.9.6 SQL Injection / Cross Site Scripting

AWBS v2.9.6 Multiple Remote Vulnerabilities Vendor: Total Online Solutions, Inc. Product web page: http://www.awbs.com Affected version: 2.9.6 Platform: PHP Summary: Whether starting new or looking to expand your existing web hosting and/or domain registration business, the AWBS fully automated...

Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability

Document Title: =============== Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1864 Release Date: ============= 2016-06-29 Vulnerability Laboratory ID VL-ID: ====================================...

Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability

Document Title: =============== Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1864 Release Date: ============= 2016-06-28 Vulnerability Laboratory ID VL-ID: ====================================...

email.tsysmerchantsolutions.com Open Redirect vulnerability

Vulnerable URL: http://email.tsysmerchantsolutions.com/tsys40/c2.php?TSYC/3589197/13716/H/N/V/https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

Android security development of ZIP file directory traversal-vulnerability warning-the black bar safety net

ZIP compressed package file to allow the presence of“../”string, an attacker can carefully construct the ZIP file, use multiple“../”thereby changing the ZIP package to a file in the storage position, the cover to replace the application the original file. If the overwritten file is available. so...

IBM Integrated Solutions Console arbitrary file read vulnerability

No description provided by source...

Lenovo company to inform the user as soon as the uninstall containing the vulnerability the software update program-vulnerability warning-the black bar safety net

! Recently,LenovoLenovo, said in a statement,they found that:before the launch of the software update program in the presence of security vulnerabilities. Due to the vulnerability within a short time can not be timely repair,so the requirements of the user as soon as possible in their use,install...

Lenovo Tells Users to Uninstall Vulnerable Updater

Lenovo has waved the white flag on a vulnerable component of its pre-installed software updater and recommends that users uninstall it from more than 110 notebook and desktop models running Windows 10. The decision to have users yank the Lenovo Accelerator Application comes days after a Duo Labs...

solutions.3m.com XSS vulnerability

Vulnerable URL: http://solutions.3m.com/wps/PAPoW/jsp/html/JspView.jsp?nid=GSJ0D3V3V2be0LND79F0LPgl=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E=GST1T4S9TCgv=SZN6R561X6ge=/wps/PAPoW Details: Description| Value ---|--- Patched:| Yes, at 01.02.2017 Latest check for patch:| 01.02.2017 05:...

Techsoft Web Solutions CMS SQL Injection Vulnerability

TECHSOFT is a WEB solution. A remote SQL injection vulnerability exists in Techsoft Web Solutions CMS. A remote attacker is able to execute malicious sql commands to connect to dbms...

Giving Red-Teamers the Blues

Pen-testing engagements are generally a breeze for most red-teamers; roadblocks are few, despite the ones in place being expensive and often paid for by very large companies. Chris Nickerson has been running such engagements for 15 years and he sees companies that throw more money and more server...

solutionslab.vzw.com XSS vulnerability

Vulnerable URL: https://solutionslab.vzw.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 28.06.2017 Latest check for patch:| 28.06.2017 19:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

AppCan vulnerability spree(AppCan weak password\XSS\SQL injection\sensitive files leaked\weak password\file upload vulnerability collection)-vulnerability warning-the black bar safety net

Test yourself to write the discuz scan tool robustness of the time to find a backup file http://bbs. appcan. cn//config/configucenter. php. bak Use uckey getshell failure,the test has changed uckey. To continue testing,found a suspected injection point http://edu. appcan. cn/traindetailnew. html?...

kyoceradocumentsolutions.com.mx XSS vulnerability

Vulnerable URL: http://www.kyoceradocumentsolutions.com.mx/americas/jsp/Kyocera/productscategory.jsp?scid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:17 GMT Vulnerability type...