5832 matches found
cgminer and bfgminer buffer overflow vulnerability
Both cgminer and bfgminer are bitcoin mining software. A stack buffer overflow vulnerability exists in addpool, failover-only, poolquota, and save command handlers in cgminer version 4.10.0 and bfgminer version 5.5.0. A remote attacker could exploit this vulnerability to execute arbitrary code...
UBUNTU-CVE-2018-10058
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers...
CVE-2018-10058
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
Design/Logic Flaw
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
CVE-2018-11649
Hue 3.12 has XSS via the /pig/save/ name and script parameters...
PT-2018-10730
Name of the Vulnerable Software and Affected Versions Hue version 3.12 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the /pig/save/ endpoint, specifically by manipulating the name and script parameters...
PT-2018-10681
Name of the Vulnerable Software and Affected Versions WooCommerce Category Banner Management plugin version 1.1.0 Description The issue is related to an Unauthenticated Settings Change, allowing anyone to modify the plugin's settings by sending a request with a wbm save shop page banner data...
PT-2018-10639
Name of the Vulnerable Software and Affected Versions CScms version 4.1 Description A Cross-site request forgery CSRF issue allows remote attackers to change the administrator's username and password via the "admin.php/sys/editpass save" API endpoint. Recommendations For CScms version 4.1, as a...
ClipperCMS Cross-Site Scripting Vulnerability
ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in the 'Site Name' field of the 'site' tag under configuration in ClipperCMS version 1.3.3. A remote attacker can exploit this vulnerability by sending a specially crafted site name to the...
PT-2018-10492
Name of the Vulnerable Software and Affected Versions ClipperCMS version 1.3.3 Description A stored cross-site scripting XSS issue exists due to improper validation of user input in the "Site Name" field, located in the "site" tab under configurations. This allows remote attackers to inject...
Code execution vulnerability in LOGA version 5.3.1
LOGA that is named "Limit Of Good AsThis" is a multi-language, multi-platform building system developed by Nuance. A code execution vulnerability exists in LOGA version 5.3.1. The vulnerability is caused by the program's failure to filter the saved content when saving configuration files, an...
save-video.com XSS vulnerability
Open Bug Bounty ID: OBB-610623 Description| Value ---|--- Affected Website:| save-video.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
save-food.de XSS vulnerability
Open Bug Bounty ID: OBB-608106 Description| Value ---|--- Affected Website:| save-food.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-10265
An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...
Cross site request forgery (csrf)
An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...
CVE-2018-10265: Cross-Site Request Forgery (CSRF)
An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...
PT-2018-9795
Name of the Vulnerable Software and Affected Versions: HongCMS version 3.0.0 Description: An issue was discovered that allows for a CSRF vulnerability, enabling the addition of an administrator account via the "admin/index.php/users/save" URI. Recommendations: For HongCMS version 3.0.0, update to...