Kodi/XBMC versions 14 and below suffer from a cross site request forgery vulnerability.
Monthly Archives: January 2015
Foxit MobilePDF 4.4.0 Local File Inclusion / Arbitrary File Upload
Foxit MobilePDF version 4.4.0 suffers from arbitrary file upload and local file inclusion vulnerabilities.
Microsoft Security Bulletin Revision Increment For January, 2015
This bulletin summary lists one bulletin that has undergone a major revision increment for January, 2015.
Microsoft Security Bulletin Summary For January, 2015
This bulletin summary lists eight released Microsoft security bulletins for January, 2015.
Blitz CMS SQL Injection
Blitz CMS suffers from a remote SQL injection vulnerability.
KeySweeper Stealth Logger
KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from any Microsoft wireless keyboard in the vicinity.
Sitefinity Enterprise 7.2.53 Script Insertion
Sitefinity Enterprise version 7.2.53 suffers from a persistent script insertion vulnerability.
Ansible Tower 2.0.2 XSS / Privilege Escalation / Authentication Missing
Ansible Tower versions 2.0.2 and below suffer from cross site scripting, privilege escalation, and missing vulnerabilities.
Congstar Internet-Manager SEH Buffer Overflow
Congstar Prepaid Internet-Stick suffers from a buffer overflow vulnerability.
T-Mobile Internet Manager SEH Buffer Overflow
T-Mobile Internet Manager web’n’walk Stick Fusion version 8.01.2015 suffers from a buffer overflow vulnerability.