Code injection

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

CVE-2018-18659

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

CVE-2018-18659

Arcserve UDP (Arcserve Unified Data Protection) up to version 6.5 Update 4 contains an unauthenticated XML External Entity (XXE) issue in the /management/UdpHttpService endpoint (DDI-VRT-2018-19). This vulnerability is documented across multiple sources and affects UDP 6.5 Update 4 and earlier ve...

Audacity 2.3 - Denial of Service (PoC)

Exploit Title: AudaCity 2.3 - Denial of Service PoC Author: Kağan Çapar Discovery Date: 2018-10-19 Software Link: https://www.fosshub.com/Audacity.html Vendor Homepage : https://www.audacityteam.org Tested Version: 2.3 Tested on OS: Windows 10 x64/86 Normal use CPU & Windows 7 High CPU usage &...

7centerpieces.com XSS vulnerability

Open Bug Bounty ID: OBB-688975 Description| Value ---|--- Affected Website:| 7centerpieces.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

scherf.at XSS vulnerability

Open Bug Bounty ID: OBB-688639 Description| Value ---|--- Affected Website:| scherf.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

elahlyelyom.net XSS vulnerability

Open Bug Bounty ID: OBB-688321 Description| Value ---|--- Affected Website:| elahlyelyom.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

monitor.hr XSS vulnerability

Open Bug Bounty ID: OBB-688278 Description| Value ---|--- Affected Website:| monitor.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

veritas.be XSS vulnerability

Open Bug Bounty ID: OBB-687972 Description| Value ---|--- Affected Website:| veritas.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Up to 35 Million 2018 Voter Records For Sale on Hacking Forum

Up to 35 million voter records have been found up for sale on a popular hacking forum from 19 states, researchers discovered. Researchers at Anomali Labs and Intel 471 on Monday said that they discovered Dark Web communications offering a large quantity of voter databases for sale – including...

CVE-2017-3912

creationtimestamp| type| source ---|---|--- 2018-09-19 02:33:14+00:00| seen| https://t.me/cibsecurity/272...

murray.wa.gov.au Improper Access Control vulnerability

Open Bug Bounty ID: OBB-677699 Description| Value ---|--- Affected Website:| murray.wa.gov.au Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2018-17051

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

CVE-2018-17042

An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop...

CVE-2018-17042

An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop...

dbf2txt infinite loop vulnerability

dbf2txt is a tool for reading DB files and converting them to TXT files. A security vulnerability exists in dbf2txt version 2012-07-19 and earlier. An attacker can exploit this vulnerability to cause a denial of service infinite loop...

Restorator 1793 - Denial of Service (PoC)

Restorator 1793 - Denial of Service PoC Exploit Title: Restorator 1793 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-08-19 Homepage: https://www.bome.com/ Software Link: https://www.bome.com/bome/downloads/Restorator2018Full1793.exe Tested Version: v1793 Tested on OS:...

Restorator 1793 - Denial of Service (PoC)

Exploit Title: Restorator 1793 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-08-19 Homepage: https://www.bome.com/ Software Link: https://www.bome.com/bome/downloads/Restorator2018Full1793.exe Tested Version: v1793 Tested on OS: Windows 7 x64 Steps to Reproduce: Run t...

OnSSI Ocularis Recorder 5.5 < Patch 10 / 5.4 < Patch 19 / 5.3 < Patch 19 Denial of Service (DoS) Vulnerability

The version of OnSSI Ocularis Recorder installed on the remote Windows host is 5.5 prior to Patch 10, 5.4 prior to Patch 19, or 5.3 prior to Patch 19. It is, therefore, affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description...

lakesutherlandfarms.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653705 Description| Value ---|--- Affected Website:| lakesutherlandfarms.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...