Pearson eSIS Enterprise Student Information System SQL Injection

Advisory ID: hag201478 Product: Pearson eSIS Enterprise Student Information System Vendor: PearsonVue Vulnerable Versions: Any version Advisory Publication: April 06, 2014 Vendor Notification: March 05, 2014 Public Disclosure: April 06, 2014 Vulnerability Type: Improper Neutralization of Special...

Google Search Appliance dynamic navigation cross-site scripting vulnerability

Overview Google Search Appliance GSA devices contain a cross-site scripting XSS vulnerability when dynamic navigation is enabled. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Google Search Appliance versions earlier than 7.2.0.G.114 and...

Threat Outbreak Alert: Fake Money Statement Notification Email Messages on April 13, 2014.

Medium Alert ID: 33764 First Published: 2014 April 14 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money statement for the recipient. The text in the email message attempts to convince the recipient to open th...

yungoucms system latest SQL injection-vulnerability warning-the black bar safety net

Official website : http://www.yungoucms.com/ demo site: http://www.yungoucms.cn/ Product search you can build a SQL statement that is! http://www.yungoucms.cn/?/stag/ publicfunction tag $search =$this-segment4; if!$ searchmessage"enter search keyword"; $search = urldecode$search; $search =...

Threat Outbreak Alert: Fake Account Statement Notification Email Messages on March 7, 2014

Medium Alert ID: 33243 First Published: 2014 March 10 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an account statement for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bill Statement Email Messages on March 3, 2014

Medium Alert ID: 33159 First Published: 2014 March 3 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bill statement from Amazon for the recipient. The text in the email message attempts to convince the recipient ...

MariaDB Server 5.5.x < 5.5.36 Remote Multiple Denial of Service Vulnerabilities

Binary data 8132.prm...

Threat Outbreak Alert: Fake Court Summons Notice Email Messages on February 15, 2014

Medium Alert ID: 32808 First Published: 2014 February 11 16:05 GMT Last Updated: 2014 February 17 16:58 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a court statement for the recipient. The text in the email message...

ODude Dir - DT

ODude DIR - DT-777 developer statement ODude Dir 1.1 updated with fixed securities issues. http://www.odude.com/main/dir/dir-log.html...

ODude Ecard - DT

ODude Ecard - DT - 777 developer statement - ODude Ecard Version 2.1 http://www.odude.com/main/odude-ecard/ecard-log.html...

ODude Profile

ODude Profile Directory Traversal vulnerability - 777 developer statement ODude Profile | 3.2 | http://www.odude.com/main/profile/profile-changelog.html ---|---|---...

F5 Networks BIG-IP Edge Client information leakage vulnerability

Overview F5 Networks has reported a flaw in the BIG-IP APM and the FirePass client-side F5-signed Edge Client components. The components may leak information from memory. CWE-200 Description F5 Networks has reported a flaw in the BIG-IP APM and the FirePass client-side F5-signed Edge Client...

Dell KACE K1000 management appliance contains a cross-site scripting vulnerability

Overview Dell KACE K1000 management appliance version 5.5.90545, and possibly earlier versions, contains a cross-site scripting XSS vulnerability. CWE-79 Description Dell KACE K1000 management appliance version 5.5.90545, and possibly earlier versions, contains a cross-site scripting XSS...

Fortinet Fortiweb 5.0.3 contains a reflected cross-site scripting vulnerability

Overview Fortinet Fortiweb 5.0.3, and possibly earlier versions, contains a cross-site scripting vulnerability. CWE-79 Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Fortinet Fortiweb 5.0.3, and possibly earlier versions, contains a cross-si...

Starbucks' iOS app storing user credentials in plain text

Watch out, coffee drinkers. If you are one of those 10 million Starbucks customers, who purchases drinks and food directly from their Smartphones, this news is for you! If you use Starbucks’ official iOS app, you should know that the company is not encrypting any of your information, including yo...

Syrian Electronic Army's own website got hacked by Turkish hacker

Oops.. Hackers got Hacked! The Syrian Electronic Army, who has hacked hundreds of High Profile targets in 2013-14, today they got hacked by a Turkish hacker. Turkguvenligi, a Turkish hacker told The Hacker News that he hacked and defaced the official website of the hacking group SEA sea.sy and...

Threat Outbreak Alert: Fake Account Bill Statement Email Messages on January 1, 2014

Medium Alert ID: 32309 First Published: 2014 January 3 16:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order receipt notification for the recipient. The text in the email message attempts to convince the recipie...

Lying on the ground look at the code-ecshop background injection-vulnerability warning-the black bar safety net

Brief description: Background injection of no value - however this point can be any structure statements, including drop database;and select into outfile, by the way also comes with the explosive path brought getshell good Detailed description: admin\include\libmain.php row 7 1 8 function...

Threat Outbreak Alert: Fake Visa Card Statement Notification Email Messages on December 8, 2013

Medium Alert ID: 32079 First Published: 2013 December 9 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a Visa card statement for the recipient. The text in the email message attempts to convince the recipient to...

WordPress Theme Make A Statement (MaS) - Cross-Site Request Forgery

WordPress Theme Make A Statement MaS - Cross-Site Request Forgery Title : Wordpress Make A Statement Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://themes.mas.gambit.ph/ Greetz ...