267 matches found
CVE-2020-14962
The CVE-2020-14962 issue affects the WordPress Final Tiles Gallery/FTG Lite plugin (versions before 3.4.19). The underlying vulnerability is Cross-Site Scripting (XSS) in the image handling: attacker-supplied input in the image Title (imageTitle) or Description (caption) fields passed to wp-admin...
CVE-2020-14962
Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title aka imageTitle or Caption aka description field of an image to wp-admin/admin-ajax.php...
Final Tiles Gallery < 3.4.19 - Authenticated Stored Cross-Site Scripting (XSS)
Multiple cross-site scripting vulnerabilities in Final Tiles Gallery 3.4.18 and lower allow remote attackers to inject arbitrary web script or HTML via the Title and Caption fields of an image. Successful exploitation of this vulnerability would allow an authenticated high-privileged user author+...
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.4.18 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.4.18. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.4.19...
Logic Flaw Vulnerability in HashHeroes Tiles
A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles, an ethereum-based guessing game. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...
carpettilesoutlet.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1097999 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
January 28, 2020—KB4532695 (OS Builds 18362.628 and 18363.628)
None None...
January 23, 2020—KB4534321 (OS Build 17763.1012)
None None...
October 24, 2019—KB4522355 (OS Build 18362.449)
None None...
October 15, 2019—KB4520062 (OS Build 17763.832)
None None...
August 30, 2019—KB4512941 (OS Build 18362.329)
None None...
Denial Of Service (DoS)
libtiff is vulnerable to heap-based buffer overflow vulnerability. Remote attackers can cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles. loadImage function in tiffcrop.c. loadImage will read the numbers of tiles by calling...
Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform
A cybersecurity professional today demonstrated a long-known unpatched weakness in Microsoft's Azure cloud service by exploiting it to take control over Windows Live Tiles , one of the key features Microsoft built into Windows 8 operating system. Introduced in Windows 8, the Live tiles feature wa...
Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform
A cybersecurity professional today demonstrated a long-known unpatched weakness in Microsoft's Azure cloud service by exploiting it to take control over Windows Live Tiles, one of the key features Microsoft built into Windows 8 operating system. Introduced in Windows 8, the Live tiles feature was...
Description of the security update for SharePoint Enterprise Server 2016: March 12, 2019
None None...
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.3.52 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.3.52. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.3.57...
CVE-2018-17987
The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUMTILES equals the number of people who purchased a tile, which allows an attacker to control the...
CVE-2018-17987
The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUMTILES equals the number of people who purchased a tile, which allows an attacker to control the...
CVE-2018-17987
HashHeroes Tiles is affected by CVE-2018-17987 in the determineWinner function of its Ethereum smart contract. The vulnerability arises from using a blockhash value to generate a random number when NUM_TILES equals the number of tile Purchases, enabling an attacker to influence the prize by being...
Cross-Site Scripting (XSS)
Apache Tiles is susceptible to cross-site scripting XSS attacks. It does not limit the evaluation of Expression Language EL expressions in certain circumstances, allowing the attacker to trigger the attack via 1 tiles:putAttribute and 2 tiles:insertTemplate JSP tags...