1810 matches found
UBUNTU-CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
Remote code execution
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to Apache OFBiz...
Updated fossil package fixes security vulnerability
Potential XSS vulnerability on the /help webpage boo1053267...
MGASA-2017-0285 Updated fossil package fixes security vulnerability
Potential XSS vulnerability on the /help webpage boo1053267...
More on My LinkedIn Account
I have successfully gotten the fake LinkedIn account in my name deleted. To prevent someone from doing this again, I signed up for LinkedIn. This is my first -- and only -- post on that account: My Only LinkedIn Post Yes, Really Welcome to my LinkedIn page. It looks empty because I'm never here. ...
WordPress GamePlan Event And Gym Fitness Theme 1.5.13.2 Cross Site Scripting Vulnerability
WordPress GamePlan Event and Gym Fitness theme versions 1.0 through 1.5.13.2 suffer from a cross site scripting vulnerability. Exploit Title: GamePlan Event and Gym Fitness WordPress Theme - Reflected XSS v1.0 - v1.5.13.2 Date: August 4, 2017 Software Link:...
code49.com.py XSS vulnerability
Vulnerable URL: https://www.code49.com.py/paginas-web-inmobiliarias-en-paraguay.php?page=1%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13428630 VIP website status:...
The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2017-22679)
Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer that could allow an attacker to exploit the vulnerability by presenting a specially crafted web page and tricking the user into parsing it, which could cause the applicati...
mstp.cwru.edu XSS vulnerability
Open Bug Bounty ID: OBB-260050 Description| Value ---|--- Affected Website:| mstp.cwru.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
acts.ac.kr XSS vulnerability
Vulnerable URL: http://www.acts.ac.kr/admission/design/admission08.asp?cry=2011=1"...
RoughTED Exploit Kits Traffic Distribution System
RoughTED Traffic Distribution System TDS operates by silently redirecting the victim to a malicious web page, leading to infection by an exploit kit. Successful infection will allow the attacker to download additional malware to the target...
Microsoft Windows Remote Code Execution Vulnerability (CNVD-2017-12778)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows. A remote attacker could exploit this vulnerability by tricking a user into opening a malicious file or web page to execute arbitrary co...
Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-12106)
Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A remote code execution vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability by tricking a user into viewing a specially craft...
Mozilla Firefox http-index-format File Out-Of-Bounds Read (CVE-2017-5444)
An out-of-bounds read has been reported in Mozilla Firefox. The vulnerability is due to improper parsing of application/http-index-format format content which can result in a read past the end of an allocated object. A remote attacker could exploit this vulnerability by enticing a user to open a...
Windows Uniscribe Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...
Windows Uniscribe Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...
Windows Uniscribe Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...
Microsoft Edge CVE-2017-8498 Information Disclosure Vulnerability
Description Microsoft Edge is prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to run arbitrary code and obtain sensitive information that may aid in...
Microsoft Edge CVE-2017-8504 Information Disclosure Vulnerability
Description Microsoft Edge is prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks...