2173 matches found
WordPress W3 Total Cache 0.9.4.1 Cross Site Scripting
Description: Cross-Site Scripting vulnerability was found on Wordpress W3 Total Cache w3tc plugin. + Plugin Version tested: Support - Add new ticket + Variable: requestid + Method: GET ------------------------------- + Affected URL:...
WAS - Automatic USB Drive Malware Scanning Tool For The Security-Minded Person
Author: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 How many times have you plugged in a USB drive and double clicked on a file without scanning for malware? I guess, MANY. Wait A Sec! Even if you are a security guy, you'll often be in a hurry or absent minded and you trust your USB dri...
Multiple vulnerabilities in the Kaspersky Total Security antivirus protection system allow attackers to obtain confidential information.
The multiple vulnerabilities of the KLDISK driver in the Kaspersky Total Security antivirus protection software are related to the lack of protection for operational data. Exploiting these vulnerabilities could allow an intruder, operating locally, to gain access to confidential information—such ...
Multiple Kaspersky Products Information Disclosure Vulnerabilities
Kaspersky Internet Security is a suite of security software that combines antivirus and firewall functionality.Kaspersky Antivirus and Total Security are both antivirus programs from Kaspersky Labs. An information disclosure vulnerability exists in several Kaspersky products, which could be...
Local Denial of Service Vulnerability in Multiple Kaspersky Products
Kaspersky Internet Security is a suite of security software that combines the functions of an antivirus and a firewall.Kaspersky Antivirus/Total Security is an antivirus program from Kaspersky Labs. A local denial of service vulnerability exists in several Kaspersky products, which could be...
Total Security < 3.4.1 - XSS & Settings Change
The Total Security WordPress plugin was affected by a XSS & Settings Change security vulnerability...
Qihu 360 Total Security 2016 Local Code Execution Vulnerability
Qihu 360 Total Security 2016 is a suite of free antivirus software from China's Qihu 360 Qihu 360 released to overseas markets. A local code execution vulnerability exists in the Qihu 360 Total Security 2016 version, which can be exploited by a local attacker to execute arbitrary code in an...
total-orthodontics.com XSS vulnerability
Vulnerable URL: http://total-orthodontics.com/wp-content/plugins/widgetkit/widgets/mediaplayer/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:...
360 Total Security 2016 DLL Hijacking
Aloha, 360TSESetup8.2.0.1039.exe loads and executes WindowsCodecs.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented...
AWBS 2.9.6 SQL Injection / Cross Site Scripting
AWBS v2.9.6 Multiple Remote Vulnerabilities Vendor: Total Online Solutions, Inc. Product web page: http://www.awbs.com Affected version: 2.9.6 Platform: PHP Summary: Whether starting new or looking to expand your existing web hosting and/or domain registration business, the AWBS fully automated...
WordPress Kento Post View Counter 2.8 Plugin - Cross-Site Request Forgery / Cross-Site Scripting
Exploit for php platform in category web applications I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin...
Total Conquest - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Total Conquest published at the 'play' market has multiple vulnerabilities...
Football Total 2015 - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Football Total 2015 published at the 'play' market has multiple vulnerabilities...
Total Snooker Free - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Total Snooker Free published at the 'play' market has multiple vulnerabilities...
USB plugin for Total Commander - External URLs, Native code usage, Runtime command execution vulnerabilities
HackApp vulnerability scanner discovered that application USB plugin for Total Commander published at the 'play' market has multiple vulnerabilities...
LAN plugin for Total Commander - External URLs, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application LAN plugin for Total Commander published at the 'play' market has multiple vulnerabilities...
Total Commander - file manager - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Total Commander - file manager published at the 'play' market has multiple vulnerabilities...
Total Fitness - Gym & Workouts - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Total Fitness - Gym & Workouts published at the 'play' market has multiple vulnerabilities...
Kaspersky Total Security Version Detection
Detects the installed version of Kaspersky Total security on Windows. The script logs in via smb, searches for kaspersky in the registry, gets the kaspersky total security installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might b...
McAfee Total Protection Detection (Windows SMB Login)
Detects the installed version of McAfee Total Protection. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...