1879 matches found
Swiss Army Knife for Mac OS X: m-cli
Swiss Army Knife for Mac OS X m-cli differs from other mac command line tools in that: Its main purpose is to manage administrative tasks and do it easier It doesn’t install 3rd party tools because it doesn’t have dependencies The installation is very easy and doesn’t require intervention It only...
YetiForce CRM < 3.1 - Persistent Cross-Site Scripting
Exploit Title: YetiForce CRM Accounts' select your prefered user, and then in the 'Comments' section input; Either refresh the current page, or navigate back to 'Accounts'...
group normalisation from 4.0 upgrade tasks is breaking permissions
Group normalisation from 4.0 upgrade tasks is breaking permissions. Scenario: backup created for 3.1.7 instance, repo "repo-uppercase-access" configured with "GROUP-A" can read access backup file restored on 4.1 instance, I can see following messages in the upgrade log code$ grep -i renam...
Unspecified Vulnerability in Oracle E-Business Common Applications Calendar Component
Oracle E-Business Suite is a suite of fully integrated, global business management software from Oracle Corporation. Oracle Common Application Calendar CAC, also known as Oracle Common Application is one of the components that can simplify the management of daily activities, appointments, and...
CVE-2016-3436
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks...
CVE-2016-3436
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks...
CVE-2016-3436
CVE-2016-3436 affects Oracle E-Business Suite (CAC/Oracle Common Applications Calendar) 12.1.1–12.1.3, specifically the Tasks subcomponent. The underlying issue is described as an unspecified vulnerability in the CAC Tasks functionality that could compromise confidentiality and integrity. CVSS‑3....
CVE-2016-3436
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Tasks...
Wunderlist: To-Do List & Tasks - Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Wunderlist: To-Do List & Tasks published at the 'play' market has multiple vulnerabilities...
Habitica: Gamify Your Tasks - BSD license, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Habitica: Gamify Your Tasks published at the 'play' market has multiple vulnerabilities...
Collected SQL Server transaction logs do not match any existing database backup: SQLINSTANCE\DATABASE
Challenge A SQL Server Transaction Log Backup task fails with the error: Collected SQL Server transaction logs do not match any existing database backup: SQLINSTANCE\DBNAME Copy Cause This error occurs because the collected transaction logs do not match the existing backup of the server. The most...
Apache ActiveMQ 5.x < 5.13.2 Multiple Vulnerabilities
The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.13.2. It is, therefore, affected by multiple vulnerabilities : - A clickjacking vulnerability exists in the web-based administration console due to not setting the X-Frame-Options header in HTTP responses. A remote attack...
WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation
''' Exploit Title: WordPress Bulk Delete Plugin Privilege Escalation Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://bulkwp.com/ Software Link: https://wordpress.org/plugins/bulk-delete/ Version: 5.5.3 Tested on:...
IBM Jazz Reporting Service-Rational-CLM Security Bypass Management Task Execution Vulnerability
IBM Jazz Reporting Service is a suite of applications for discovering cross-project reports from IBM in the U.S. Report Builder is one of the tools used to quickly create reports. A security vulnerability in Report Builder for IBM Jazz Reporting Service allows remote attackers to exploit the...
CVE-2015-7468
Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended restrictions on administrator tasks via unspecified vectors...
[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
CVE-2015-1344
The dowritepids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file...
Android Security Restriction Bypass Vulnerability (CNVD-2015-06603)
Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in Android versions prior to 5.1.1, LMY48I. This allows an attacker to bypass the target getRecentTasks restriction and...
The vulnerability of the iOS operating system allows a hacker to bypass existing security mechanisms and scan ports of random processes.
The vulnerability of the processorsettasks component in the iOS operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker acting locally to bypass existing security mechanisms and scan ports of random processes...