15794 matches found
Netgear Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Netgear Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
WordPress Plugin SP Client Document Manager 2.4.1 - SQL Injection
Vulnerability title: Multi SQL Injection in SP Client Document Manager plugin CVE: N/A Vendor: http://smartypantsplugins.com Plugin: SP Client Document Manager Download link: https://wordpress.org/plugins/sp-client-document-manager/ Affected version: version 2.4.1 and previous version Google dork...
WordPress SP Client Document Manager 2.4.1 SQL Injection
Vulnerability title: Multiple SQL Injection in SP Client Document Manager plugin Plugin: SP Client Document Manager Vendor: http://smartypantsplugins.com Product: https://wordpress.org/plugins/sp-client-document-manager/ Affected version: version 2.4.1 and previous version Fixed version: N/A Goog...
FreeBSD : yii -- Remote arbitrary PHP code execution (5a35bc56-7027-11e4-a4a3-001999f8d30b)
Yii PHP Framework developers report : We are releasing Yii 1.1.15 to fix a security issue found in 1.1.14. We urge all 1.1.14 users to upgrade their Yii to this latest release. Note that the issue only affects 1.1.14. All previous releases are not affected. Upgrading to this release from 1.1.14 i...
WordPress SP Client Document Manager 2.4.1 SQL Injection Vulnerability
WordPress SP Client Document Manager plugin version 2.4.1 suffers from multiple remote SQL injection vulnerabilities. Vulnerability title: Multiple SQL Injection in SP Client Document Manager plugin Plugin: SP Client Document Manager Vendor: http://smartypantsplugins.com Product:...
Windows secure channel remote code execution vulnerability, CVE-2 0 1 4-6 3 2 1）Analysis-vulnerability warning-the black bar safety net
I. background Windows secure channel Secure Channel, Schannel）surprise the reported vulnerability, Microsoft recently released as a major grade MS14-0 6 6 information security Bulletin, revealed in the Schannel remote code execution vulnerability, CVE-2 0 1 4-6 3 2 1 in. The affected Microsoft...
Detekt — Free Anti-Malware Tool To Detect Govt. Surveillance Malware
Human rights experts and Privacy International have launched a free tool allowing users to scan their computers for surveillance spyware, typically used by governments and other organizations to spy on human rights activists and journalists around the world. This free-of-charge anti-surveillance...
WordPress CM Download Manager 2.0.0 Code Injection Vulnerability
WordPress CM Download Manager plugin versions 2.0.0 and below suffer from a code injection vulnerability. Vulnerability title: Code Injection in Wordpress CM Download Manager plugin CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Product:...
Advantech WebAccess 7.2 Stack-Based Buffer Overflow Vulnerability
Advantech WebAccess version 7.2 is vulnerable to a stack-based buffer overflow attack, which can be exploited by remote attackers to execute arbitrary code, by providing a malicious html file with specific parameters for an ActiveX component. Advantech WebAccess Stack-based Buffer Overflow 1...
WordPress CM Download Manager 2.0.0 Code Injection
Vulnerability title: Code Injection in Wordpress CM Download Manager plugin CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Product: https://wordpress.org/plugins/cm-download-manager/ Affected version: 2.0.0 and previous version Fixed version:...
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2014-006
Session hijacking Drupal 6 and 7 A specially crafted request can give a user access to another user's session, allowing an attacker to hijack a random session. This attack is known to be possible on certain Drupal 7 sites which serve both HTTP and HTTPS content "mixed-mode", but it is possible...
SA-CONTRIB-2014-114 - Tournament - Cross Site Scripting
This project allows you to create various types of tournaments as nodes and associated teams, tournaments, and matches. There are several cases in the project where an account username, node title, and team entity title are not correctly filtered before being displayed to a user. It is possible t...
Proticaret E-Commerce Script 3.0 - SQL Injection Vulnerability
Proticaret E-Commerce Script version 3.0 suffers from a remote SQL injection vulnerability. Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce...
Proticaret E-Commerce Script 3.0 - SQL Injection (2)
Proticaret E-Commerce Script 3.0 - SQL Injection 2 Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information:...
Proticaret E-Commerce Script 3.0 - SQL Injection (2)
Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...
Android Bug 1 7 3 5 6 8 2 4 BroadcastAnywhere vulnerability analysis-vulnerability warning-the black bar safety net
2 0 1 4 year 8 month, retme analysis of Android to fix a vulnerability, and the name for the launchAnyWhere1 In debugging this vulnerability, I found the Settings Application there is also a similar vulnerability, and 9 reported to the Android Security Team, title, Privilege escalation...
Alpha Networks Router Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...