1310 matches found
Joomla Admin 3.7.4 Database Disclosure
Exploit Title : Joomla comadmin Components from V2.5.4 to V3.7.4 Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 19/11/2018 Vendor Homepage : joomla.org +...
WordPress Universal Post Manager 1.5.0 Database Disclosure
Exploit Title : WordPress universal-post-manager 1.5.0 Plugins Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/11/2018 Vendor Homepage : wordpress.org/support/plugin/universal-post-manager/...
Joomla MacGallery Database Disclosure
Exploit Title : Joomla commacgallery Components Apptha Install-Uninstall Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 19/11/2018 Vendor Homepage : joomla.org...
Ticketly 1.0 - 'name' SQL Injection
Exploit Title: Ticketly 1.0 – 'name' SQL Injection Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-11-19 Google Dork: N/A Vendor: Abisoft https://abisoftgt.net Software Link: https://abisoftgt.net/software/6/sistema-de-tickets-y-soporte-con-php-y-mysql Affected Version: 1...
Security clean up /plugins/servlet/Wallboard.old 200 response
A low risk Path-Based Vulnerability exists at /plugins/servlet/Wallboard.old. Stylesheets and basic html page load for page that should not exist/deprecated...
Cisco Small Business Switches Authentication Bypass Vulnerability
Cisco Small Business 200 Series Smart Switches and others are small smart switch devices from Cisco USA.Small Business Switches Software is a set of switch software that runs on them. A security vulnerability exists in the Small Business Switches software for several Cisco products. A remote...
[SECURITY] Fedora 28 Update: kernel-4.18.12-200.fc28
The kernel meta package...
Design/Logic Flaw
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email...
CVE-2018-1000803
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email...
CVE-2018-1000803
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email...
CVE-2018-1000803
The CVE refers to Gitea prior to v1.5.1, where a CWE-200 information-disclosure flaw allows exposure of users’ private email addresses. According to connected sources, the issue can be triggered via the “Watch a repository” email-notification flow, causing emails to include recipients’ addresses ...
CVE-2018-1000803
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email...
[SECURITY] Fedora 28 Update: kernel-4.18.10-200.fc28
The kernel meta package...
Sentrifugo HRMS 3.2 - 'deptid' SQL Injection
Exploit Title: Sentrifugo HRMS 3.2 - 'deptid' SQL Injection Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-08-26 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version:...
PCViewer vt1000 - Directory Traversal Vulnerability
Exploit for windows platform in category web applications Exploit Title: PCViewer vt1000 - Directory Traversal Exploit Author: Berk Dusunur Vendor Homepage: N/A Software Link: http://www.softpedia.com/get/System/File-Management/Pc-Viewer.shtml Affected Version: vt1000 Tested on: Parrot OS CVE : N...
Eltex ESP-200 Privilege Vulnerability
Eltex ESP-200 is a wireless router product. An elevation of privilege vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to activate an elevated privilege user...
Eltex ESP-200 Command Injection Vulnerability
Eltex ESP-200 is a wireless router product. A command injection vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to execute arbitrary code...
Default credentials
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0...