vPhoto-Album 4.2 iOS - Local File Inclusion

Document Title: =============== vPhoto-Album v4.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 147...

PhotoWebsite 3.1 Local File Inclusion

Document Title: =============== PhotoWebsite v3.1 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 147...

PhotoWebsite v3.1 iOS - File Include Web Vulnerability

Document Title: =============== PhotoWebsite v3.1 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 147...

PhotoWebsite v3.1 iOS - File Include Web Vulnerability

Document Title: =============== PhotoWebsite v3.1 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 147...

WordPress QAEngine Theme 1.4 Privilege Escalation

Theme Link: https://www.enginethemes.com/themes/qaengine/ - Vulnerability Description: + 1st Vulnerability: qaengine vulnerability allows an attacker to have an administrator account on the target's website vuln code in /qaengine/includes/aecore/class-ae-users.php: public function insert...

IBM InfoSphere BigInsights SQL Component Unauthorized Access Vulnerability

IBM InfoSphere BigInsights is a set of software platform for storing and analyzing "big data" from IBM in the United States. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data.Big SQL is one of the SQL interface components. A security...

PT-2015-5488

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 3.0 through 3.0.0.2 Description The issue allows remote authenticated users to bypass intended HDFS data-access restrictions. This can be achieved via a crafted CREATE HADOOP TABLE statement referencing the...

[SECURITY] Fedora 21 Update: owncloud-7.0.5-2.fc21

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

[SECURITY] Fedora 20 Update: owncloud-7.0.5-2.fc20

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

java-1.8.0-openjdk security update

1:1.8.0.45-30.b13 - repacked sources - Resolves: RHBZ1209076 1:1.8.0.45-7.b13 - Re-add %name prefix to patches to avoid conflicts with OpenJDK 7 versions. - Remove ppc64le test case now fix has been verified. - Resolves: rhbz1194378 1:1.8.0.45-27.b13 - updated to security u45 - minor sync with 7....

CVE-2015-2846

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

Design/Logic Flaw

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

CVE-2015-2846

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

CVE-2015-2846

CVE-2015-2846 affects BitTorrent Sync (BTSync.exe) where the BTSync protocol handler fails to properly validate btsync: URLs, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file/link) and results in arbitrary command executio...

BitTorrent Sync BTSync.exe Arbitrary Code Execution Vulnerability

BitTorrent Sync is a set of data synchronization tools developed by the American company BitTorrent. The tool synchronizes files between different devices over LANs and the Internet using secure, distributed P2P technology. An arbitrary code execution vulnerability exists in BitTorrent Sync's...

CVE-2015-2846: Improper Neutralization of Special Elements used in a Command

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link...

BitTorrent Sync （peer-to-peer file synchronization system on there is a high risk of command injection vulnerability-vulnerability warning-the black bar safety net

According to HP 0day plans ZDI in last week's announcement that BitTorrent Sync on the presence of a high-risk vulnerability, an attacker can remotely execute arbitrary code. The black bar safety net science BitTorrent Sync is BitTorrent network technology company launched in multiple computers f...

PT-2015-5931

Name of the Vulnerable Software and Affected Versions BitTorrent Sync affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via a crafted btsync: link. This is a result of a command injection vulnerability in the btsync: protocol...

BitTorrent Sync btsync: Protocol Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BitTorrent Sync. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how BitTorrent Sync...

WordPress plugin WPML 'menu sync' function has unspecified vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WPML is one of the multi-language plug-ins. A security vulnerability exists in the 'menu sync' function of the...