265 matches found
Paid To Read Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can exploit this vulnerability by sending the 'tier' parameter to the...
New Relic: Users can enable API access for free via mass assignment
Free tier users aren't allowed API access, but it's possible to bypass this restriction thanks to a mass assignment bug. To replicate this, first verify that you don't already have API access by visiting: Account Settings - API Explorer - Create an API Key You should see the message "This feature...
MultiTier,3.1,SQL Injection
MultiTier by Beesto.com, 3.1, SQL Injection...
CVE-2016-5994
IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...
CVE-2016-5994
IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents...
SQL Injection Vulnerability in Pisces Forest PHP Based MVC Faculty Selection Grade Management System
Pisces forest PHP based MVC faculty elective course grade management system is based on a three-tier model to develop faculty elective course grade management system. SQL injection vulnerability exists in the PHP based MVC Academic Record Management System ARMS. The vulnerability allows attackers...
How I snooped into your private Slack messages [Slack Bug bounty worth $2,500]
When researching about MX records of slack.com, I noticed that they used a 3rd party email service. In that service, however slack.com was already claimed. After a little more research, I found that all the sub-domains of slack.com like teamname.slack.com also had MX set to the same service. Thes...
[SECURITY] Fedora 23 Update: kf5-kdnssd-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...
[SECURITY] Fedora 23 Update: kf5-kfilemetadata-5.24.0-1.fc23
A Tier 2 KDE Framework for extracting file metadata...
[SECURITY] Fedora 23 Update: kf5-kunitconversion-5.24.0-1.fc23
KDE Frameworks 5 Tier 2 addon for unit conversions...
[SECURITY] Fedora 23 Update: kf5-ki18n-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 addon for localization...
[SECURITY] Fedora 23 Update: kf5-kactivities-stats-5.24.0-1.fc23
A KDE Frameworks 5 Tier 3 library for accessing the usage data collected by the activities system...
[SECURITY] Fedora 23 Update: kf5-ktextwidgets-5.24.0-1.fc23
KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...
[SECURITY] Fedora 23 Update: kf5-sonnet-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 solution for spell checking...
[SECURITY] Fedora 23 Update: kf5-kcodecs-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 addon with string manipulation methods...
[SECURITY] Fedora 23 Update: kf5-kwidgetsaddons-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 addon with various classes on top of QtWidgets...
[SECURITY] Fedora 23 Update: kf5-kitemmodels-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 addon with item models...
[SECURITY] Fedora 23 Update: kf5-kjobwidgets-5.24.0-1.fc23
KDE Frameworks 5 Tier 2 addon for KJobs...