4785 matches found
CVE-2016-6153
osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service application crash, or have unspecified other impact by leveraging use of the current working directory for...
SQLite Tempdir Selection Vulnerability
Vulnerability Details Affected Vendor: SQLite/Hwaci Affected Product: SQLite Affected Version: All versions prior to 3.13.0 Platform: UNIX, GNU/Linux CWE Classification: CWE-379: Creation of Temporary File in Directory with Incorrect Permissions Impact: Data Leakage Attack vector: Local 2...
SQLite Tempdir Selection
KL-001-2016-003 : SQLite Tempdir Selection Vulnerability Title: SQLite Tempdir Selection Vulnerability Advisory ID: KL-001-2016-003 Publication Date: 2016.07.01 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2016-003.txt 1. Vulnerability Details Affected Vendor: SQLite/Hwa...
[SECURITY] Fedora 24 Update: roundcubemail-1.2.0-1.fc24
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
План счетов Украина - External URLs, SQLite database found, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application План счетов Украина published at the 'play' market has multiple vulnerabilities...
F5 Networks BIG-IP : SQLite vulnerability (K16950)
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...
SOL37236006 - SQLite vulnerabilities CVE-2015-3414 and CVE-2015-3415
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
[SECURITY] Fedora 23 Update: roundcubemail-1.2.0-1.fc23
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
Marfil - An Extension of the Aircrack-ng Suite used to assess WiFi Network Security
Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key crackin...
[SECURITY] Fedora 24 Update: roundcubemail-1.1.5-1.fc24
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
SQL Injection
Overview Affected versions of sequelize use MySQL's backslash-based escape syntax when connecting to SQLite, despite the fact that SQLite uses PostgreSQL's escape syntax, which can result in a SQL Injection vulnerability. Recommendation Update to version 1.7.0-alpha3 or later. References - Commit...
[SECURITY] Fedora 22 Update: roundcubemail-1.1.5-1.fc22
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 23 Update: roundcubemail-1.1.5-1.fc23
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
phpLiteAdmin 1.9.6 - Multiple Vulnerabilities
phpLiteAdmin 1.9.6 - Multiple Vulnerabilities Exploit Title: phpLiteAdmin v1.9.6 - Multiple Vulnerabilities Date: 20.04.2016 Exploit Author: Ozer Goker Vendor Homepage: https://www.phpliteadmin.org Software Link: https://bitbucket.org/phpliteadmin/public/downloads/phpLiteAdminv1-9-6.zip Version:...
phpLiteAdmin 1.9.6 - Multiple Vulnerabilities
Exploit Title: phpLiteAdmin v1.9.6 - Multiple Vulnerabilities Date: 20.04.2016 Exploit Author: Ozer Goker Vendor Homepage: https://www.phpliteadmin.org Software Link: https://bitbucket.org/phpliteadmin/public/downloads/phpLiteAdminv1-9-6.zip Version: 1.9.6 Introduction phpLiteAdmin is a web-based...
SQL Injection
Overview Affected versions of sequelize cast arrays to strings and fail to properly escape the resulting SQL statement, resulting in a SQL injection vulnerability. Proof of Concept In Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as strings and improperly...
Georgian Quotes - ანდაზები - Dynamic Code Loading, External URLs, SQLite database found vulnerabilities
HackApp vulnerability scanner discovered that application Georgian Quotes - ანდაზები published at the 'play' market has multiple vulnerabilities...
The Gospels in Unison - SQLite database found, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application The Gospels in Unison published at the 'play' market has multiple vulnerabilities...
为何我信 - Base64 encoded String, SD-card access, SQLite database found vulnerabilities
HackApp vulnerability scanner discovered that application 为何我信 published at the 'play' market has multiple vulnerabilities...
The Reason Why - Base64 encoded String, SD-card access, SQLite database found vulnerabilities
HackApp vulnerability scanner discovered that application The Reason Why published at the 'play' market has multiple vulnerabilities...