12422 matches found
Shoe give away scam hits Android users with malware on Play Store
By Sudais Asif The malware campaign on Play Store promised users a free pair of shoes within 14 days of ordering them from within the app. This is a post from HackRead.com Read the original post: Shoe give away scam hits Android users with malware on Play Store...
Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-49460)
Navigate CMS is a powerful and intuitive content management system. A cross-site scripting vulnerability exists in the "Store" module of Navigate CMS 2.9. This vulnerability can be exploited by attackers to conduct cross-site scripting attacks...
USN-4474-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, trick the user in to installing a malicious extension, spoof the URL bar, leak sensitive information...
USN-4474-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, trick the user in to installing a malicious extension, spoof the URL bar, leak sensitive information...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
Code injection
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
CVE-2020-24653
Summary: CVE-2020-24653 affects Expo’s secure-store on iOS up to 2.16.1, where the app uses the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is selected. This misconfiguration can expose protected data due to the accessibility attribute, with high imp...
CVE-2020-7705
This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the...
Shopify: Password protection can be removed for newly created development store
Details Per https://help.shopify.com/en/partners/dashboard/managing-stores/development-storesthe-development-store-password-page, it states that the password can only be removed once the store has been transferred or switch to a paid plan. You can remove the password page only after you transfer...
Pharmacy Medical Store And Sale Point 1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection Exploit Author: Moaaz Taha 0xStorm Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html...
Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection Exploit Author: Moaaz Taha 0xStorm Date: 2020-08-18 Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html Software Link:...
Pharmacy Medical Store and Sale Point 1.0 - (catid) SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection Exploit Author: Moaaz Taha 0xStorm Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html...
Online Book Store Cross Site Scripting
==================================================================== Online Book Store project in PHP Mysql - Persistent XSS ==================================================================== .:. Author : Yussef Dajdaj .:. Contact : .:. Vendor : https://projectworlds.in/ .:. Script :...
Online Book Store SQL Injection
==================================================================== Online Book Store project in PHP Mysql - SQL injection ==================================================================== .:. Author : Yussef Dajdaj .:. Contact : .:. Vendor : https://projectworlds.in/ .:. Script :...
The vulnerability of the Microsoft Store Runtime component in Microsoft Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Microsoft Store Runtime operating system components in Microsoft Windows is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Missing Linux Kernel mitigations for 'SSB - Speculative Store Bypass' hardware vulnerabilities
The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Ubuntu License Issues Vulnerabilities
Ubuntu is a set of GNU/Linux operating systems for desktop applications from the British company Canonical and Ubuntu. An authorization issue vulnerability exists in trust-store in Ubuntu. An attacker could exploit this vulnerability to access restricted locations...
