230 matches found
WordPress Javo Spot Premium Theme <= 2.0.0 - Unauthenticated Directory Traversal
WordPress Javo Spot Premium Theme = 2.0.0 - Unauthenticated Directory Traversal / Local File Inclusion vulnerability discovered by Soulseekah Solution Update theme to the latest version at least version 2.0.1...
Javo Spot Premium Theme - Unauthenticated Directory Traversal
Print out any file in the via an unauthenticated AJAX request. /wp-admin/admin-ajax.php? jvfrmspotgetjson&fn=../../wp-config.php&callback=jQuery...
Spot Animals - Native code usage, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Spot Animals published at the 'play' market has multiple vulnerabilities...
KDDI HOME SPOT CUBE devices Cross-Site Request Forgery Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A cross-site request forgery vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit this vulnerability to perform unauthorized operations...
An unspecified vulnerability exists in KDDI HOME SPOT CUBE devices.
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A security vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker could exploit the vulnerability to conduct clickjacking attacks...
KDDI HOME SPOT CUBE devices CRLF Injection Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A CRLF injection vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit this vulnerability to inject arbitrary HTTP headers...
Unspecified vulnerability in KDDI HOME SPOT CUBE devices (CNVD-2016-00911)
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A security vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit the vulnerability to execute arbitrary OS commands...
CVE-2016-1141
KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2016-1141
KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2016-1139
Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2016-1139
Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2016-1140
KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2016-1140
KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2016-1138
CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors...
CVE-2016-1138
CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors...
CVE-2016-1137
Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2016-1137
Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2016-1136
Cross-site scripting XSS vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
