PT-2021-17972 · Rust +6 · Rust +6

Name of the Vulnerable Software and Affected Versions: Rust versions prior to 1.52.0 Description: The issue is related to a panic safety problem in the Zip implementation of the Rust standard library. It occurs when the underlying iterator panics under certain conditions, causing iterator get...

PT-2021-14660 · Jenkins · Jenkins Configuration Slicing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Configuration Slicing Plugin versions 1.51 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to apply different slice configurations to attacker-specified jobs. This issue arises because the for...

PT-2019-2298 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.52 and earlier Description: A sandbox bypass issue exists that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM by providing a Groovy script to an HTTP...

Unspecified Vulnerability in JBMC DirectAdmin

JBMC DirectAdmin is a server visual management panel from JBMC Software Canada. A security vulnerability exists in JBMC DirectAdmin versions prior to 1.52. A remote attacker can exploit this vulnerability by sending a request to gain access or cause a denial of service segmentation error...

CVE-2017-18045

JBMC DirectAdmin before 1.52, when the emailftppasswordchange setting is nonzero, allows remote attackers to obtain access or cause a denial of service segfault via an unspecified request...

PHP-Lance 1.52 SQL Injection

Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/ Version: 1.52 Category: Webapps Tested on:...

PHP-Lance 1.52 - subcat SQL Injection

PHP-Lance 1.52 - subcat SQL Injection Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/ Version: 1.52 Categor...

PHP-Lance 1.52 - subcat Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP-Lance 1.52 - 'subcat' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phplance/ Demo: http://www.scriptdemo.com/php-lance/...

PhotoKorn Gallery <= 1.52 (dir_path) Remote File Include Vulnerabilities

No description provided by source. ==================================================================== PhotoKorn Gallery = 1.52 dirpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...

Input validation

boost::locale::utf::utftraits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes...

CVE-2013-0252

The CVE-2013-0252 entry concerns Boost.Locale’s boost::locale::utf::utf_traits, where Boost versions 1.48–1.52 fail to detect certain invalid UTF-8 sequences. This could allow bypassing input validation via crafted trailing bytes. Connected advisories (openSUSE, SUSE, Mandriva/MDVSA-2013:065, Fed...

OpenDNSSEC 1.2.1 latest version Released !

OpenDNSSEC 1.2.1 latest version Released ! Version 1.2.1 of OpenDNSSEC has now been released. ldns 1.6.9 is required for bugfixes. dnsruby-1.52 required for bugfixes. Bugfixes: Auditor: 'make check' now works when srcdir != builddir. Auditor: Include the 'make check' files in the tarball. Enforce...

MailEnable 1.52 HTTP Mail Service Buffer Overflow

/ MailEnable 1.52 HTTP Mail Service Stack Overflow POC Exploitencoded comand Debugging Info szAppName : MEHTTPS.EXE szAppVer : 1.0.0.1 szModName : MEHTTPS.EXE szModVer : 1.0.0.1 offset : 00010c21 Files that caused error : C:\DOCUME1\Stefan\LOCALS1\Temp\WER567c.dir00\MEHTTPS.EXE.mdmp...

PHP-Lance 1.52 Local File Inclusion

Name : PHP-Lance v1.52 price US $349.95 :p Demo : http://www.scriptdemo.com/php-lance/ ------------------------------------------------------------------------ |Author : jetli007 |alkhari9007ATgmailDOTcom |www.vxx9.cc |Thx&Greets to: 5D;taishi;dr.php;!bad boy!;psycho;ABK;reno...

PHP-Lance 1.52 - Multiple Local File Inclusions

PHP-Lance 1.52 - Multiple Local File Inclusions Name : PHP-Lance v1.52 price US $349.95 :p Demo : http://www.scriptdemo.com/php-lance/ ------------------------------------------------------------------------ |Author : jetli007 |alkhari9007ATgmailDOTcom |www.vxx9.cc |Thx&Greets to:...

Sql injection

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4716

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4716

CVE-2008-4716 affects BitmixSoft PHP-Lance 1.52; show.php is vulnerable to SQL injection via the catid parameter, enabling remote SQL execution. Base score 7.5 (HIGH; NETWORK attacker, no auth). Exploits are documented (Exploit-DB 6605). No remediation details are provided in the connected docume...

PHP-Lance 1.52 (show.php catid) Remote SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

PHP-Lance 1.52 (show.php catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHP-Lance 1.52 show.php catid Remote SQL Injection Vulnerability ==================================================================...