CVE-2018-10168

TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1Windows...

CVE-2018-10164

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version...

Cross site scripting

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version...

CVE-2018-10168

TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1Windows...

Hardcoded credentials

The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key and the algorithm can decrypt it. A low-privilege user could decrypt and modify the backup file in...

CVE-2018-10165

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the userName parameter in the local user creation functionality. This is fixed in version...

Debian DLA-1348-1 : patch security update

It was discovered that there was an input validation vulnerability in the patch1 utility where an ed1 script embedded in a regular input file could result in arbitrary code execution. This was reported by Rachel Kroll 0 et al. For Debian 7 'Wheezy', this issue has been fixed in patch version...

Gentoo net-im/jabberd2 elevation of privilege vulnerability

The Gentoo net-im/jabberd2 package is an XMPP Extensible Message Processing Field Protocol package from the Gentoo Foundation. A security vulnerability exists in the Gentoo net-im/jabberd2 package version 2.6.1 and earlier. A local attacker can exploit the vulnerability to terminate arbitrary...

Lynis 2.6.1 - Security Auditing Tool for Unix/Linux Systems

We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...

Shibboleth Service Provider Dynamic MetadataProvider Plugin Security Bypass Vulnerability

Shibboleth is the British Shibboleth company's set of open source based on the SAML protocol of the Web single sign-on system . Shibboleth Service Provider SP is one of the service provider components. Dynamic MetadataProvider plugin is one of the Dynamic DataProvider plugin. A security...

Apache Hadoop Insufficient Access Control Vulnerability

Apache Hadoop is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:hadoop"; i...

PHP Melody 2.6.1 - SQL Injection

Author : Venkat Rajgor + Email : [email protected] + Vulnerability : SQL injection E-mail ID : [email protected] Download : http://www.phpsugar.com Web : http://www.phpsugar.com Price : $39 USD Vulnerable parameter: http://x.x.x.x/playlists.php?playlist= Application : PHPSUGAR PHP Melody...

PHP Melody 2.6.1 - SQL Injection

PHP Melody 2.6.1 - SQL Injection + Author : Venkat Rajgor + Email : [email protected] + Vulnerability : SQL injection E-mail ID : [email protected] Download : http://www.phpsugar.com Web : http://www.phpsugar.com Price : $39 USD Vulnerable parameter: http://x.x.x.x/playlists.php?playlist=...

PHP Melody 2.6.1 SQL Injection Vulnerability

Exploit for php platform in category web applications --------------------------------------------------- PHP Melody 2.6.1 SQL Injection --------------------------------------------------- + Author : Venkat Rajgor + Email : email protected + Vulnerability : SQL injection ---------info...

PHP Melody 2.6.1 SQL Injection

--------------------------------------------------- PHP Melody 2.6.1 SQL Injection --------------------------------------------------- + Author : Venkat Rajgor + Email : [email protected] + Vulnerability : SQL injection ---------info Cms---------------- name : PHP Melody version 2.6.1 email :...

CVE-2015-7672

Cross-site scripting XSS vulnerability in Centreon 2.6.1 fixed in Centreon 18.10.0 and Centreon web 2.8.27...

Mautic has an unspecified vulnerability

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic 2.6.1 and earlier versions. No details of the vulnerability are provided at this time...

CVE-2017-1000046

Mautic 2.6.1 and earlier fails to set flags on session cookies...

CVE-2017-10807

CVE-2017-10807 affects JabberD 2.x (jabberd2) prior to 2.6.1. It allows anyone to authenticate using SASL ANONYMOUS, even when sasl.anonymous c2s.xml is not enabled. Impact described in sources: authentication bypass with potential further misuse. Remediation observed in connected docs: upgrade t...

VulnCheck KEV: CVE-2001-0550

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "" argument to commands such as CWD, which is not properly handled by the glob function ftpglob...