7138 matches found
Cisco Prime Infrastructure Unauthenticated Remote Code Execution
Cisco Prime Infrastructure CPI contains two basic flaws that when exploited allow an unauthenticated attacker to achieve remote code execution. The first flaw is a file upload vulnerability that allows the attacker to upload and execute files as the Apache Tomcat user; the second is a privilege...
CVE-2018-17832
creationtimestamp| type| source ---|---|--- 2018-10-02 23:52:25+00:00| seen| https://t.me/VulnerabilityNews/2058...
CVE-2018-4251
creationtimestamp| type| source ---|---|--- 2018-10-02 16:02:50+00:00| seen| https://t.me/antichat/2238 2018-10-02 17:05:47+00:00| seen| https://t.me/canyoupwnme/4490 2018-10-03 08:27:12+00:00| seen| https://t.me/haccking/2900 2018-10-20 18:57:59+00:00| seen| https://t.me/offzonemoscow/27...
CVE-2018-7108
HPE StorageWorks XP7 Automation Director AutoDir version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a...
HPE XP7 Automation Director Authentication Bypass Vulnerability
HPE StorageWorks XP7 Automation Director AutoDir is a StorageWorks automation management system from Hewlett Packard Enterprise HPE. An authentication bypass vulnerability exists in HPE StorageWorks XP7 AutoDir versions 8.5.2-02 through prior to 8.6.1-00, which can be exploited by an attacker to...
CQU-LANKERS Cross-Site Scripting Vulnerability
CQU-LANKERS is a system of university community services. A cross-site scripting vulnerability exists in the public/api.php file in CQU-LANKERS 2017-11-02 and earlier versions, which can be exploited by remote attackers to bypass the Web Application Protection System with the help of the 'callbac...
CVE-2018-15486
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02...
CVE-2018-15486
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02...
Symantec Mobile Encryption for iPhone 2.1.0 - Server Denial of Service (PoC)
Symantec Mobile Encryption for iPhone 2.1.0 - Server Denial of Service PoC Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-09-02 Vendor Homepage: https://www.symantec.com/ Software Link:...
Sql injection
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
CVE-2018-16353
An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter...
fledrCMS Cross-Site Request Forgery Vulnerability
fledrCMS is a lightweight, responsive PHP-based content management system CMS. A cross-site request forgery vulnerability exists in fledrCMS 2014-02-03 and earlier versions. A remote attacker can exploit this vulnerability to change the administrator password with the help of the...
CVE-2018-10618
creationtimestamp| type| source ---|---|--- 2018-08-02 08:58:11+00:00| seen| https://t.me/SecLabNews/2808...
CVE-2018-10624
creationtimestamp| type| source ---|---|--- 2018-08-02 08:29:16+00:00| seen| https://t.me/SecLabNews/2807...
Design/Logic Flaw
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcrmessagemessage in rmessage.c...
CVE-2018-14743
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretypedecode in context.c...
CVE-2018-14739
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcpatternsetdefault in pattern.c...
THULAC Memory Corruption Vulnerability
THULAC is a Chinese lexical analysis toolkit introduced by the Natural Language Processing and Social Humanities Computing Laboratory of Tsinghua University, which supports Chinese word segmentation and lexical annotation functions. A memory corruption vulnerability exists in the libthulac.so fil...