27 matches found
EUVD-2016-5578
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2014-4410
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption an...
Linux Distros Unpatched Vulnerability : CVE-2016-7635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before...
CVE-2020-18985
An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing...
Travelable 1.0 Cross Site Scripting
Exploit Title: Travelable 1.0 - Stored XSS Exploit Author: CraCkEr Date: 15/07/2023 Vendor: travelmate.com Vendor Homepage: https://www.codester.com/items/43963/travelable-trek-management-solution Software Link: https://travel.codeswithbipin.com/ Tested on: Windows 10 Pro Impact: Manipulate the...
PHPJabbers Forum Script 3.0 Persistent Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
SUSE CVE-2011-0195
The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202...
wavpack: Heap out-of-bounds read in WavpackPackSamples()
A heap out-of-bounds read flaw was found in WavPacks' WavpackPackSamples function of src/packutils.c and only affects the command-line program of WavPack not libwavpack. This flaw allows an attacker to exploit this flaw for a website that uses the WavPack command-line program on user-provided...
Exploit for SQL Injection in Prestashop Blockwishlist
CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1...
Unspecified Vulnerability in LogMeIn LastPass
LogMeIn LastPass is a cross-platform online password management tool from LogMeIn USA. A security vulnerability exists in LogMeIn LastPass versions prior to 4.33.0. An attacker could exploit the vulnerability by building a specially crafted website to capture credentials for user accounts...
CVE-2019-1043
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability coul...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Apple Safari Tabs Spoofing Vulnerability
Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems; Safari Tabs is one of the extended Safari tabs components for use in Safari the web browser. A spoofing vulnerability exists in the Safari Tabs component in versions o...
Flash Exposure serious vulnerability:the hacker can be spread ransomware bug fixes-vulnerability warning-the black bar safety net
Ist 4 month 9 days morning news, Adobe today emergency issued a Flash patch that fixes a serious security vulnerability. The vulnerability may be a hacker used to spread ransomware. Currently, the global 1 0 million users on Windows, Mac, Chrome OS and Linux on the computer using the Flash...
Microsoft Windows Media Analytics Remote Code Execution Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows. A remote attacker could exploit this vulnerability to execute code and compromise a vulnerable system by tricking a user into opening...
Filet-o-Firewall UPnP Security Vulnerability in Home Routers
Security vulnerabilities in UPnP continue to crop up and continue to put millions of home networking devices at risk for compromise. The latest was revealed in early August, but prompted an advisory yesterday from the DHS-sponsored CERT at the Software Engineering Institute at Carnegie Mellon...
Chinese hackers defaces Philippines News Agency website
Chinese hackers defaced the website of the government owned Philippines News Agency PNA on Sunday. Defaced page of the website was with the Chinese flag and the text: "China Hacker EvilShadow Team, We are evil shadow. We are the team. We have our own dignity China Hacker Lxxker." The hackers shar...
Anonymous Hackers target website of Russian court that sentenced Pussy Riot
The website of the Moscow district court that sentenced three members of the band Pussy Riot to jail has been attacked by hackers posting anti-Putin messages. As well as the anti-Putin slogan Anonymous Russia posted an appeal for the band's release as well as a video clip of one of the band's...
Pendulab ChatBlazer 8.5 - Username Cross-Site Scripting
Pendulab ChatBlazer 8.5 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/53168/info ChatBlazer is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Tit for Tat - Anonymous Hackers Brings Down FBI website for #OpMegaupload
Tit for Tat - Anonymous Hackers Brings Down FBI website for OpMegaupload Megaupload.com, one of the world's most popular sources of online piracy, has been shut down by a federal indictment issued Thursday, which seized and charged seven people connected with it with running an international...