CVE-2017-17592

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

Sql injection

Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...

Advanced World Database 2.0.5 SQL Injection

Exploit Title: Advanced World Database 2.0.5 - SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advanced-world-database/ Version: 2.0.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

Website Auction Marketplace 2.0.5 SQL Injection

Exploit Title: Website Auction Marketplace 2.0.5 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://flippa-clone.com/ Software Link: https://flippa-clone.com/ Demo: https://demo.flippa-clone.com/ Version: 2.0.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

Website Auction Marketplace 2.0.5 - cat_id SQL Injection

Website Auction Marketplace 2.0.5 - catid SQL Injection Exploit Title: Website Auction Marketplace 2.0.5 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://flippa-clone.com/ Software Link: https://flippa-clone.com/ Demo: https://demo.flippa-clone.com/ Version: 2.0.5 Category:...

Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection

Exploit Title: Website Auction Marketplace 2.0.5 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://flippa-clone.com/ Software Link: https://flippa-clone.com/ Demo: https://demo.flippa-clone.com/ Version: 2.0.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

GHSA-XXVW-45RP-3MJ2 Deserialization Code Execution in js-yaml

Versions 2.0.4 and earlier of js-yaml are affected by a code execution vulnerability in the YAML deserializer. Proof of Concept const yaml = require'js-yaml'; const x = test: !!js/function function f console.log1; ; yaml.loadx; Recommendation Update js-yaml to version 2.0.5 or later, and ensure...

CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...

CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...

DEBIAN-CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...

CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...

CVE-2017-2888

SDL2 versions affected: SDL 2.0.x with vulnerable code path when creating a new RGB Surface (notably in 2.0.5). Root cause: integer overflow during surface allocation due to crafted image input, leading to too little memory allocation, a subsequent buffer overflow, and potential code execution. P...

CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...

CVE-2017-2888

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a...

I-O DATA DEVICE RockDisk Cross-Site Scripting Vulnerability

The I-O DATA DEVICE RockDisk is a networked storage NAS device from Japan's I-O DATA DEVICE. The device provides data storage functions for centralized management of stored data. A cross-site scripting vulnerability exists in the I-O DATA DEVICE RockDisk using firmware versions prior to...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

S9Y Serendipity Cross-Site Request Forgery Vulnerability

Serendipity is a PHP-based blogging system. The system supports the creation of online journals, blogs, web pages and more. A cross-site request forgery vulnerability exists in versions prior to S9Y Serendipity 2.0.5 due to the program failing to properly validate HTTP requests. A remote attacker...

MLM Binary Plan Script 2.0.5 - SQL Injection

MLM Binary Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Binary Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-binary-plan-script/ Demo: http://74.124.215.220/binamlm/...

MLM Membership Plan Script 2.0.5 - SQL Injection

MLM Membership Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Membership Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-membership-plan-script/ Demo:...