PT-2014-79: Cross-Site Scripting in ShopOS

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in ShopOS. Cross-site scripting in the market.php script allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user's browser. How to fix No...

PT-2014-82: Multiple Local File Inclusion Vulnerabilities in ShopOS

The specialists of the Positive Research center have detected multiple Local File Inclusion vulnerabilities in ShopOS. Insufficient validation of user input in the \en\lang.php script allows remote attackers to include files located on the attacked server and thus execute a PHP code. It may resul...

PT-2014-89: Open Redirect in ShopOS

The specialists of the Positive Research center have detected an Open Redirect vulnerability in ShopOS. Open redirect in the redirector.php script allows remote attackers to control user redirection. This vulnerability can be exploited to conduct a series of attacks against users of the web...

PT-2014-66: Cross-Site Scripting in InstantCMS

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in InstantCMS. Cross-site scripting in the frontend.php file allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user's browser. How to fi...

PT-2014-84: Local File Inclusion in ShopOS

The specialists of the Positive Research center have detected a Local File Inclusion vulnerability in ShopOS. Insufficient validation of user input in the 2.php script allows remote attackers to include files located on the attacked server and thus execute a PHP code. It may result in sensitive...

PT-2014-88: SQL Injection in ShopOS

The specialists of the Positive Research center have detected SQL Injection vulnerability in ShopOS. SQL Injection in the manager.php script allows remote attackers to execute arbitrary SQL commands via a specially crafted request. How to fix No solution. Advisory status 26.12.2013 - Vendor gets...

PT-2014-65: Multiple Cross-Site Scripting in InstantCMS

The specialists of the Positive Research center have detected multiple Cross-Site Scripting vulnerabilities in InstantCMS. Cross-site scripting in the spellchecker.php file allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user's...

PT-2014-68: Multiple SQL Injection in InstantCMS

The specialists of the Positive Research center have detected multiple SQL Injection vulnerabilities in InstantCMS. SQL Injection in the cms.php script allows remote attackers to execute arbitrary SQL commands via a specially crafted request. How to fix Update your software up to the latest...

[SECURITY] Fedora 18 Update: xulrunner-26.0-1.fc18

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Exploit for windows platform in category local exploits Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application for du EITC UAE users to support mobile broadband 3G...

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application for du EITC UAE users to support mobile broadband 3G...

PT-2014-71: Cross-Site Scripting in Jahia CMS

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Jahia CMS. Reflected cross-site scripting in the groupsearch.jsp page allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user's browse...

PT-2014-74: Cross-Site Scripting in Jahia CMS

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Jahia CMS. Stored cross-site scripting in the ManageSiteLanguages.java script allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user'...

PT-2014-69: Cross-Site Scripting in Jahia CMS

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Jahia CMS. Reflected cross-site scripting in the manager.jsp page allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user's browser. H...

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation

Summary du Mobile Broadband is a shareware application for du EITC UAE users to support mobile broadband 3G activation for du service provider with systems containing one of the supported devices. It lets you access du wireless internet wherever you are and whenever you need it, all powered throu...

PT-2014-70: Cross-Site Scripting in Jahia CMS

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Jahia CMS. Reflected cross-site scripting in the usersearch.jsp page allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a page processed by user's browser...

PT-2014-73: Two Cross-Site Scripting vulnerabilities in Jahia CMS

The specialists of the Positive Research center have detected two Cross-Site Scripting vulnerabilities in Jahia CMS. Two reflected cross-site scripting vulnerabilities in the ManageGroups.java script allows remote attackers to inject arbitrary HTML tags including JavaScript scripts, etc. to a pag...

Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities

Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities Document Title: =============== Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1168 Release Date: ============= 2013-12-11...