2833 matches found
Joomla! Core XSS Vulnerability(CVE-2017-7986)
Joomla! is one of the world's most popular content management system CMS solutions. It enables users to build custom Web sites and powerful online applications. More than 3 percent of Web sites are running Joomla!, and it accounts for more than 9 percent of CMS market share. As of November 2016,...
Super File Explorer 1.0.1 Arbitrary File Upload Vulnerability
Super File Explorer version 1.0.1 suffers from a remote file upload vulnerability. Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability Product & Service Introduction: =============================== This app is a file manager and viewer. For iPhone, iPo...
Super File Explorer 1.0.1 Arbitrary File Upload
Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2034 Release Date: ============= 2017-02-23 Vulnerability Laboratory ID VL-ID:...
PT-2017-2770 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue is related to the sanity check raw super function in the Linux kernel, which does not properly validate the segment count. This allows local users to gain privileges via unspecified...
Privilege control logic vulnerability in Zendo project management software
Zendo is an open source project management software. The authorize function in the backend module\user\model.php of the Zendo project management software has a privilege control logic vulnerability, which leads to the users in the upper management group privilege 9 to use the create and update...
CVE-2017-7221
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...
CVE-2017-7221
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Huawei Tecal E9000 Chassis Hyper Module Management Permission License Access Control Vulnerability
Huawei Tecal E9000 Chassis is a blade server from Huawei, China.Hyper Module Management HMM is one of the redundancy management module software. A security vulnerability exists in the HMM software in Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions. An attacker can exploit the...
Design/Logic Flaw
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...
CVE-2014-9695
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...
Super Fast Browser - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Super Fast Browser published at the 'play' market has multiple vulnerabilities...
Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability
Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2034 Release Date: ============= 2017-02-23 Vulnerability Laboratory ID VL-ID:...
UBUNTU-CVE-2016-10208
The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...
santander.cl XSS vulnerability
Vulnerable URL: http://www.santander.cl/tarjetas/personas/super-descuentos/index.asp?id=360=convenio"alert/OPENBUGBOUNTY/...
Vulnerabilities Leave iTunes, Apple's App Store Open to Script Injection
Apple is reportedly aware of and is in the middle of fixing a pair of vulnerabilities that exist in iTunes and the App Store. If exploited, researchers claim an attacker could inject malicious script into the application side of the vulnerable module or function. Vulnerability Lab’s Benjamin Kunz...
Cross-site scripting vulnerability in wordpress plugin super-slider
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin super-slider suffers from a cross-site scripting vulnerability due to improper filtering of user input,...
Did You Install Super Mario Run APK for Android? That's Malware
After the success of Pokémon Go, Nintendo's "Super Mario Run" has become the hottest game to hit the market with enormous popularity and massive social impact. The game has taken the world by storm since its launch for iOS devices over a week ago. Can you believe — it was downloaded more than 40...