EUVD-2010-1038

Malware in sbrugna...

EUVD-2010-1037

Malware in sbrugna...

CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1005

Cross-site scripting XSS vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Yatse, the Kodi / XBMC Remote - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yatse, the Kodi / XBMC Remote published at the 'play' market has multiple vulnerabilities...

Yatse Stream Plugin - Customized SSL, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Yatse Stream Plugin published at the 'play' market has multiple vulnerabilities...

CVE-2010-1005

Cross-site scripting XSS vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1005

The CVE-2010-1005 issue concerns the Yet another TYPO3 search engine (YATSE) extension for TYPO3, with XSS in versions prior to 0.3.2. Affected component: YATSE extension (TYPO3). Root cause and exact vectors are not detailed in the provided documents; exploitation specifics are not described. Im...

CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1004

CVE-2010-1004 affects the Yet another TYPO3 search engine (YATSE) extension for TYPO3, up to version 0.3.1. The vulnerability is a SQL injection in an unspecified vector that could allow remote attackers to execute arbitrary SQL commands. The fixed version is 0.3.2. If exploited, the impact would...