3530 matches found
Privilege control logic vulnerability in Zendo project management software
Zendo is an open source project management software. The authorize function in the backend module\user\model.php of the Zendo project management software has a privilege control logic vulnerability, which leads to the users in the upper management group privilege 9 to use the create and update...
CVE-2017-7221
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...
CVE-2017-7221
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Huawei Tecal E9000 Chassis Hyper Module Management Permission License Access Control Vulnerability
Huawei Tecal E9000 Chassis is a blade server from Huawei, China.Hyper Module Management HMM is one of the redundancy management module software. A security vulnerability exists in the HMM software in Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions. An attacker can exploit the...
Design/Logic Flaw
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...
CVE-2014-9695
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...
CVE-2014-9695: Undefined Security Weakness
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...
Super Fast Browser - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Super Fast Browser published at the 'play' market has multiple vulnerabilities...
Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability
Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2034 Release Date: ============= 2017-02-23 Vulnerability Laboratory ID VL-ID:...
UBUNTU-CVE-2016-10208
The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image...
santander.cl XSS vulnerability
Vulnerable URL: http://www.santander.cl/tarjetas/personas/super-descuentos/index.asp?id=360=convenio"alert/OPENBUGBOUNTY/...
Vulnerabilities Leave iTunes, Apple's App Store Open to Script Injection
Apple is reportedly aware of and is in the middle of fixing a pair of vulnerabilities that exist in iTunes and the App Store. If exploited, researchers claim an attacker could inject malicious script into the application side of the vulnerable module or function. Vulnerability Lab’s Benjamin Kunz...
Cross-site scripting vulnerability in wordpress plugin super-slider
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin super-slider suffers from a cross-site scripting vulnerability due to improper filtering of user input,...
Did You Install Super Mario Run APK for Android? That's Malware
After the success of Pokémon Go, Nintendo's "Super Mario Run" has become the hottest game to hit the market with enormous popularity and massive social impact. The game has taken the world by storm since its launch for iOS devices over a week ago. Can you believe — it was downloaded more than 40...
CVE-2016-7787
A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user...
Command injection
A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user...
CVE-2016-7787
A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user...
Debian Security Advisory DSA 3735-1 (game-music-emu - security update)
Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened. Further information can be found at...