Schneider Electric U.motion Builder syslog_getdata Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder sysloggetdata. The base SQLite database query requires SQL injection on the type, level, ishandled, and lastlogid input parameters. A remote...

Schneider Electric U.motion Builder xmlserver Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder xmlserver. The underlying SQLite database query requires SQL injection of the id input parameter. A remote attacker can exploit this...

Schneider Electric U.motion Builder message_simple_html restart parameter denial of service vulnerability

U.motion Builder is a generator product from Schneider Electric France. Schneider Electric U.motion Builder messagesimplehtml reboot parameter denial of service vulnerability. Allows a remote attacker to permanently reboot the system and deny service to all users...

Schneider Electric U.motion Builder file_picker remote code execution vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder filepicker. The user-specified upload path is not constrained, so any logged-in user can upload a file to any location in the system that is...

Schneider Electric U.motion Builder Remote Code Execution Vulnerability (CNVD-2017-09466)

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder. The underlying SQLite database query used to determine if a user is logged in requires SQL injection on the loginSeed parameter, which can be...

Schneider Electric U.motion Builder editscript remote code execution vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in the Schneider Electric U.motion Builder editscript. It allows a caller with standard user privileges to write arbitrary PHP files anywhere in the web service directory tree. An...

WordPress Themes U-design File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in WordPress Themes U-design, which can be exploited by an attacker to upload arbitrary...

Serv-U FTP/MFT Server Unauthorized Elevation of Privilege Vulnerability

Serv-U FTP/MFT Server are both widely used FTP server programs. An unauthorized elevation of privilege vulnerability exists in Serv-U FTP/MFT Server versions prior to 15.1.5, which can be exploited by an attacker to gain Serv-U administrative privileges and use the System Administrator account to...

DEBIAN-CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

FTP Voyager Scheduler 16.2.0 - Cross-Site Request Forgery

FTP Voyager Scheduler 16.2.0 - Cross-Site Request Forgery !-- + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: ============== solarwinds.com...

FTP Voyager Scheduler 16.2.0 CSRF / Denial Of Service

Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: ============== solarwinds.com www.serv-u.com Product: ==================== FTP Voyager...

u-pec.fr Open Redirect vulnerability

Open Bug Bounty ID: OBB-206560 Description| Value ---|--- Affected Website:| u-pec.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Cemu 1.6.4b - Information Leak Buffer Overflow (Emulator Breakout)

Cemu 1.6.4b - Information Leak Buffer Overflow Emulator Breakout For those who only care about one thing: the PoC is here. Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New...

Cemu 1.6.4b - Information Leak / Buffer Overflow (Emulator Breakout)

For those who only care about one thing: the PoC is here. Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New versions are released to those who donate to him via his Patreon...

u-volga.ru XSS vulnerability

Vulnerable URL: http://u-volga.ru/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4261190 VIP website status:| No Check u-volga.ru SSL connection:| Grade: F Coordinated...

SQL Injection Vulnerability in Penta Digital Campus System folder Parameter

Penta Digital Campus System is using the technology platform of .NET+SqlServer. A SQL injection vulnerability exists in the /BG/Mail/UMessageView.aspx page of Pangda Digital Campus System. The lack of filtering of the 'folder' parameter allows an attacker to exploit the vulnerability to obtain...

CVE-2016-6550

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-6550

The CVE references a vulnerability in the U by BB&T iOS app (versions 1.5.4 and earlier). The root cause is improper validation of SSL server certificates (X.509), enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Affected software: ...

u-cergy.fr XSS vulnerability

Vulnerable URL: https://www.u-cergy.fr/fr/rechercher-dans-le-site.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98921 VIP website status:| No Check u-cergy.fr SSL connection:| Grade: B Coordinated Disclosu...

U by BB&T iOS banking application fails to properly validate SSL certificates

Overview U by BB&T for iOS, version 1.5.4 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks. Description CWE-295: Improper Certificate Validation - CVE-2016-6550U by BB&T is a banking...