Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content. To exploit the bypas...

Huawei VMall Override Vulnerability

Huawei VMall is Huawei's e-commerce platform for nationwide services. Huawei VMall suffers from an overstepping vulnerability, which can be exploited by local attackers who do not have access privileges to trick users into installing malicious mobile applications, sending outbound HTTP requests a...

UBUNTU-CVE-2017-12938

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

Resource consumption vulnerability in multiple Huawei phones

Huawei P9 and others are smartphones from the Chinese company Huawei Huawei. A resource consumption vulnerability exists in several Huawei phones. An attacker can exploit the vulnerability by tricking users into installing a malicious application that may turn on the phone's flash and quickly dra...

Google Android Qualcomm Secure Channel Manager Driver Elevation of Privilege Vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in Google Android Qualcomm Secure Channel Manager Driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by trickin...

Google Chrome Blink Type Obfuscation Vulnerability

Google Chrome is a web browser developed by Google Inc. in the United States. A type obfuscation vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the...

Netgear DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution

!/usr/bin/python Provides access to default user account, privileges can be easily elevated by using either: - a kernel exploit ex. memodipper was tested and it worked - by executing /bin/bd suid backdoor present on SOME but not all versions - by manipulating the httpd config files to trick the...

IBM Security Access Manager Security Bypass Vulnerability (CNVD-2017-01409)

IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager that stems from the program failing to properly validate content. An attacker could exploit the vulnerability by tricking a user into opening specially crafted...

Wordpress Quiz And Survey Master Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in the Wordpress Quiz And Survey Master plugin. Attackers can...

Wordpress plugin trail-passion has xss vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin trail-passion suffers from an xss vulnerability due to improper filtering of user input, which allows attackers to frame malicious web pages, trick...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment is a suite of software for centralized management of Cisco HCS solutions. A cross-site request forgery vulnerability exists in Cisco Hosted Collaboration Mediation Fulfillment that could allow a remote attacker to construct a malicious URI, trick a...

Microsoft Internet Explorer CVE-2016-3353 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. This could allow the attacker to bypass certain security restrictions. This may lead to othe...

Android LibUtils Arbitrary Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in Android LibUtils allows remote attackers to exploit the vulnerability to build malicious applications that can be elevated in privilege by tricking users in...

The vulnerability of the Internet Explorer browser allows a perpetrator to trick users into creating a TCP connection with a limited port.

The vulnerability of Internet Explorer is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to remotely trick users into establishing a TCP connection with a limited port, through a specially crafted web page...

Google Chrome suffers from an unspecified vulnerability (CNVD-2016-03796)

Google Chrome is a popular web browser. Google Chrome has an unspecified security vulnerability that allows remote attackers to exploit the vulnerability to build malicious web pages and trick users into parsing them for attack...

Cybozu Garoon Email Read Vulnerability (CNVD-2016-03720)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...

phpMyFAQ Cross-Site Request Forgery Vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site request forgery vulnerability exists in phpMyFAQ. Due to the application failing to properly validate the 'Interface Translation' translation function of the originating HTTP request. An unauthenticated remote attacker c...

dotDefender Firewall Cross-Site Request Forgery Vulnerability

dotDefender is a suite of real-time network monitoring tools that provide comprehensive monitoring of networks, protection against malicious attacks by hackers, and more. A cross-site request forgery vulnerability exists in dotDefender that allows remote attackers to construct malicious URIs, tri...

Transparent Phone Screen Trick - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Transparent Phone Screen Trick published at the 'play' market has multiple vulnerabilities...

Yeager Cross-Site Request Forgery Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious operations...