Apache Tika XML External Entity Denial of Service Vulnerability

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide read and write Microsoft Office format documents open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work provides a unified...

UBUNTU-CVE-2018-11761

In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack...

Cross site scripting

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

CVE-2018-14873

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

Design/Logic Flaw

An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset...

CVE-2018-14873

An issue was discovered in Rincewind 0.1. There is a cross-site scripting XSS vulnerability involving a p=account request to index.php and another file named commonPages.php...

Rincewind Cross-Site Scripting Vulnerability

Rincewind is a content management system CMS. A cross-site scripting vulnerability exists in Rincewind version 0.1. A remote attacker can inject arbitrary web script or HTML by sending a p=account request to the index.php and commonPages.php files...

Unspecified vulnerability in jpeg-compressor

jpeg-compressor is an encoder for generating JPEG format files. A security vulnerability exists in the 'buildhuffman' function of the stbimage.c file in jpeg-compressor version 0.1. An attacker can exploit this vulnerability to cause a denial of service stack buffer overflow and application crash...

WPHunter - Wordpress Vulnerability Scanner

You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands of WP sites are vulnerable to attacks and get hacked each...

Gratipay: Information Disclosure on inside.gratipay.com

Hello @gratipay, By checking request headers I've been able to identify that inside.gratipay.com is running on Server: WSGIServer/0.1 Python/2.7.11. Request: https://inside.gratipay.com/assets/inside-gratipay.svg GET /assets/inside-gratipay.svg HTTP/1.1 Host: inside.gratipay.com User-Agent:...

Cisco IP Phone 8851 Denial of Service Vulnerability

Cisco IP Phone 8851 is a telephone product from Cisco USA that provides video and VoIP communication features. A denial of service vulnerability exists in the Session Initiation Protocol SIP implementation in the Cisco IP Phone 8851 version 11.00.1. A remote attacker could exploit this...

Design/Logic Flaw

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.50.1...

CVE-2017-3817

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.50.1...

Web Based Alumni Tracking System 0.1 - SQL Injection

Web Based Alumni Tracking System 0.1 - SQL Injection Exploit Title.............. Web Based Alumni Tracking System Multiple Vulnerability Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage...

Fashion Shopping Cart 0.1 - SQL Injection

Fashion Shopping Cart 0.1 - SQL Injection Exploit Title.............. Fashion Shopping Cart SQL Injection Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage............ http://www.sourcecodester.com/node/10435 Software...

Simple Shopping Cart Application 0.1 - SQL Injection

Simple Shopping Cart Application 0.1 - SQL Injection Exploit Title.............. Simple Shopping Cart Application SQL Injection Google Dork................ inurl:"product-details.php?prodid=" "Designed by FBC Students" Date....................... 14/10/2016 Exploit Author............. lahilote...

Fashion Shopping Cart 0.1 - SQL Injection

Exploit Title.............. Fashion Shopping Cart SQL Injection Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage............ http://www.sourcecodester.com/node/10435 Software Link...

Cisco IOS XR Native OS Command Injection Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series in a fully modular, distributed network interconnection operating system. A security vulnerability exists in the CLI in Cisco IOS XR versions 6.x through 6.0.1. A local attacker could exploit the vulnerability to execute...

SlimCMS 0.1 - Cross-Site Request Forgery (Change Admin Password)

SlimCMS 0.1 - Cross-Site Request Forgery Change Admin Password input type="hidden" name="theme" value=...

Axil CMS 0.1 SQL Injection

Exploit Title : Axil CMS 0.1 Authentication bypass Exploit Author : Persian Hack Team Vendor Homepage : http://www.axilcreations.com/ Date: 2016/03/31 Version : 0.1 PoC: User And Pass : '=' 'or' Demo : http://www.mets.com.np/myadmin/ http://www.princeies.com/myadmin/...