Ipswitch MOVEit Mobile Cross-Site Request Forgery Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. Ipswitch MOVEit Mobile suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...

NHL Hat Trick Challenge - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NHL Hat Trick Challenge published at the 'play' market has multiple vulnerabilities...

Dell VPN client Netextender 0day analysis-vulnerability warning-the black bar safety net

The VPN client is most IT security professionals will use a tool, using it can be connected to a“restricted”local area network, anonymous Internet access, ensure network traffic security, etc. But just imagine, if the VPN client can cause the machine to the elevation of privileges? Note: currentl...

Adobe Download Manager Suspicious Search Path Vulnerability

Adobe Download Manager works directly with Adobe servers to help control the download process of Adobe Reader, Adobe Acrobat and other Adobe files. A suspicious search path vulnerability exists in Adobe Download Manager, where malicious attackers can build malicious files and trick users into...

Ubuntu 14.04 LTS : IcedTea Web vulnerabilities (USN-2817-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2817-1 advisory. It was discovered that IcedTea Web incorrectly handled applet URLs. A remote attacker could possibly use this issue to inject applets into the...

AlienVault OSSIM Cross-Site Request Forgery Vulnerability

AlienVault OSSIM is an open source security information management system. AlienVault OSSIM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...

Foxit Reader Forms Out-of-Bounds Remote Code Execution Vulnerability

Foxit Reader is a compact PDF reader. A security vulnerability exists in Foxit Reader's PDF Forms, which allows an attacker to exploit a constructed PDF file to trick the user into parsing it, reading memory outside of the allocated object, and executing arbitrary code...

Adobe Flash Player Flash broker API has unspecified vulnerability

Adobe Flash Player is a Flash file handling program. An unspecified security vulnerability exists in the Adobe Flash Player Flash broker API. This allows remote attackers to construct malicious SWF content and trick users into parsing it...

Microsoft Edge Memory Object Handling Information Disclosure Vulnerability

Microsoft Edge is one of the latest WEB browsers. A security vulnerability exists in Microsoft Edge's handling of object memory. The vulnerability allows remote attackers to construct a special WEB page to trick users into loading it, which can obtain partial memory information about the target...

Adobe Acrobat/Reader Javascript API Execution Bypass Vulnerability (CNVD-2015-06693)

Adobe Reader/Acrobat is a popular application for working with PDF files. An execution bypass vulnerability exists in Adobe Reader/Acrobat. Allows an attacker to construct a malicious PDF file and trick the user into parsing it, which can bypass Javascript API execution restrictions...

Kaspersky Internet Security File Deshelling Buffer Overflow Vulnerability

Kaspersky Internet Security is an Internet security suite. Kaspersky Internet Security handles file stripping with a security vulnerability that allows an attacker to construct malicious files and trick users into parsing them, which can crash applications or execute arbitrary code...

Adobe Flash Player Memory Leakage Vulnerability

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory disclosure vulnerability exists in Adobe Flash Player, which allows attackers...

Aruba Networks Mobility Controller Cross-Site Request Forgery Vulnerability

Aruba Networks Mobility Controller is a suite of solutions that provide mobile access for the enterprise. A cross-site request forgery vulnerability exists in Aruba Networks Mobility Controller, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can...

Drupal OSF Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in the Drupal OSF module when the OSF Ontology and OSF Import modules are enabled in the program, which allows remote attackers to construct malicious URIs, trick users...

Apple OS X SceneKit Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X SceneKit, which allows an attacker to construct a malicious file and trick a user into parsing it, which could crash an application or execute arbitrary code...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2015-04903)

Google Chrome is an open source WEB browser. Google Chrome's automatic open list handling suffers from a security vulnerability that allows attackers to build malicious WEB pages, trick users into parsing them, and allow executable files to be executed immediately after download...

Unspecified vulnerability in Oracle MySQL client component

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the client subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can impact system availability...

EMC Documentum CenterStage Cross-Site Scripting Vulnerability

EMC Documentum CenterStage is a document management service. A cross-site scripting vulnerability in EMC Documentum CenterStage allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the target user...

Cisco TelePresence MCU 4500 Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence MCU 4500 is a multimedia conferencing bridge product. A cross-site request forgery vulnerability exists in the Cisco TelePresence MCU 4500 device, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in...

Drupal Node Template Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP.Node Template is a module that uses the structure and data of nodes as a template. A cross-site request forgery vulnerability exists in the Drupal Node Template module that allows a remote attacker to construct a maliciou...