CVE-2019-2880

Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications component: Security. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Store...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally...

KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update

The remote Windows host is missing security update 4550970 or cumulative update 4550961. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully...

April 14, 2020—KB4550939 (OS Build 15063.2346)

None None...

Apple App Store Riddled With Money-Sucking Fleeceware Apps

Researchers are warning iPhone users of fleeceware apps after finding more than 30 examples of them on Apple’s App Store. Fleeceware is jargon for apps that trick users into paying excessive fees for basic applications and functionality that is available free elsewhere. Many of these fleeceware...

CVE-2018-12126

Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is split into STA STore Address and STD STore Data sub-operations. These sub-operations allow the processor to hand-off address generation...

July 2014 cumulative update for Windows Store in Windows 8.1 or Windows Server 2012 R2

July 2014 cumulative update for Windows Store in Windows 8.1 or Windows Server 2012 R2 Introduction This update makes improvements to Windows Store in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2. Improvements This update contains the following improvements: Apps that you have installe...

Windows 8.1 Store improvements: January 2014

Windows 8.1 Store improvements: January 2014 Summary This article describes the update rollup for Windows RT 8.1 and Windows 8.1 that is dated January 2014. This update package includes performance and reliability improvements. We recommend that you apply this update rollup as part of your regula...

Can't open Windows Store applications in Windows 8.1 or Windows Server 2012 R2

Can't open Windows Store applications in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs after certain updates are installed in Windows RT 8.1, Windows 8.1, or Windows Server 2012 R2. You can resolve this issue by applying the update in this article. Before you...

CVE-2018-21087

An issue was discovered on Samsung mobile devices with L5.x, M6.x, and N7.x software. There is a vnswap heap-based buffer overflow via the store function, with resultant privilege escalation. The Samsung ID is SVE-2017-10599 January 2018...

store.noelgallagher.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136039 Security Researcher NUMAN Helped patch 32 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting store.noelgallagher.com website and its users. Following...

CVE-2017-18691

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos8890 chipsets software. There are multiple Buffer Overflows in TSP sysfs cmdstore. The Samsung ID is SVE-2016-7500 January 2017...

Logic flaw vulnerability in Liangjing Mall online store shopping system (CNVD-2020-25591)

Liangjing Mall Online Shop Shopping System is a multifunctional online store system. There is a logic flaw vulnerability in Liang Jing Mall Online Shop Shopping System, which can be exploited by attackers to modify the transaction amount...

Shopify: Session works after logout from Shopify account and password of online store is displayed

When a user creates a Shopify Lite Plan account, in the product creation stage when the account has not been upgraded, the store's password is enabled such that any visitor who wants to access the store is required to enter password before being granted access to view the products listed in the...

Command Execution Vulnerability in DSMall (CNVD-2020-25887)

DSMall is a complete B2B2C multi-store mall solution. DSMall suffers from a command execution vulnerability that can be exploited by attackers to execute malicious code...

Command Execution Vulnerability in ecshop

ecshop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. There is a command execution vulnerability in...

RHEL 7 : Red Hat Virtualization Engine security, 4.3.9 (Low) (RHSA-2020:1308)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1308 advisory. The org.ovirt.engine-root is a core component of oVirt. The following packages have been upgraded to a later upstream version:...

Google Bans Infowars Android App Over Coronavirus Claims

Apple kicked Alex Jones out of the App Store in 2018. The Google Play Store has finally followed suit...

Watch Out: Android Apps in Google Play Store Capitalizing on Coronavirus Outbreak

Preying on public fears, the ongoing coronavirus outbreak is proving to be a goldmine of opportunity for attackers to stage a variety of malware attacks, phishing campaigns, and create scam sites and malicious tracker apps. Now in a fresh twist, third-party Android app developers too have begun t...

Watch Out: Android Apps in Google Play Store Capitalizing on Coronavirus Outbreak

Preying on public fears, the ongoing coronavirus outbreak is proving to be a goldmine of opportunity for attackers to stage a variety of malware attacks, phishing campaigns, and create scam sites and malicious tracker apps. Now in a fresh twist, third-party Android app developers too have begun t...