CVE-2017-8832

Allen Disk 1.6 has a Cross-Site Scripting (XSS) vulnerability in the id parameter of downfile.php. The connected records consistently describe this XSS flaw for Allen Disk 1.6, but none of the provided documents supply details on exploitation methods, affected versions beyond 1.6, specific root c...

CVE-2017-4967

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

IBM Insights Foundation for Energy Sensitive Information Disclosure Vulnerability

IBM Insights Foundation for Energy is a suite of energy analytics, data management and visualization solutions from IBM in the United States. A sensitive information disclosure vulnerability exists in IBM Insights Foundation for Energy versions 1.0,1.5 and 1.6. It allows authenticated users to...

CVE-2017-1141

IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information from error messages. IBM X-Force ID: 121907...

Debian DLA-869-1 : cgiemail security update

The cPanel Security Team discovered several security vulnerabilities in cgiemail, a CGI program used to create HTML forms for sending mails : CVE-2017-5613 A format string injection vulnerability allowed to supply arbitrary format strings to cgiemail and cgiecho. A local attacker with permissions...

PYSEC-2017-7

An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0...

Joomla JE Auction 1.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

WordPress Easy Table 1.6 Cross Site Scripting

============================================= MGC ALERT 2017-001 - Original release date: Feb 07, 2017 - Last revised: Feb 12, 2017 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score ============================================= I. VULNERABILITY -------------------------...

CVE-2016-9333

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input SQL INJECTION...

Pivotal GemFire for PCF Remote Privilege Elevation Vulnerability

Pivotal Software GemFire for PCF is a high-performance, scalable, in-memory distributed database for PCF from Pivotal Software, USA. A remote elevation of privilege vulnerability exists in Pivotal Software GemFire for PCF version 1.6.x prior to 1.6.5 and version 1.7.x prior to 1.7.1. A remote...

Syrian's joomla 1.6.x Download Database Backup

No description provided by source...

Database Backup Download Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A database backup download vulnerability exists in joomla version 1.6.x. The vulnerability stems from the program's failure to adequately filter user-submitted input, which can be exploited by an attacker to download database backups to...

Moxa SoftCMS Input Validation Vulnerability

Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. An input validation vulnerability exists in versions of Moxa SoftCMS prior to 1.6. An attacker...

Moxa SoftCMS Denial of Service Vulnerability

Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. A denial of service vulnerability exists in Moxa SoftCMS versions prior to 1.6. Due to a double...

Moxa SoftCMS SQL Injection Vulnerability

Moxa SoftCMS is a set of centralized management software for large-scale surveillance systems developed by Moxa. The software supports real-time video surveillance, video playback and event management. A SQL injection vulnerability exists in Moxa SoftCMS versions prior to 1.6. An attacker can...

Apache Tika Remote Code Execution Vulnerability

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide read and write Microsoft Office format documents open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work provides a unified...

Distributed Ruby (dRuby/DRb) Multiple RCE Vulnerabilities

Systems using Distributed Ruby dRuby/DRb, which is available in Ruby versions 1.6 and later, may permit unauthorized systems to execute distributed commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cgiemail 1.6 - Source Code Disclosure

Cgiemail 1.6 - Source Code Disclosure !/usr/bin/env perl Exploit Title: cgiemail local file inclusion Vendor Homepage: http://web.mit.edu/wwwdev/cgiemail/webmaster.html Software Link: http://web.mit.edu/wwwdev/cgiemail/cgiemail-1.6.tar.gz Version: 1.6 and older Date: 2016-09-27 cgiecho a script...

Design/Logic Flaw

The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry PCF 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-dependent attackers to obtain sensitive information by reading the log data, as demonstrated by a syslog message that contains credentials...

Moxa SoftCMS Vulnerabilities

OVERVIEW Zhou Yu working with Trend Micro’s Zero Day Initiative and Gu Ziqiang from Huawei Weiran Labs have identified vulnerabilities in Moxa’s SoftCMS Webserver Application. Moxa has produced an update to mitigate these vulnerabilities. Both researchers have tested the update to validate that i...