Sql injection

RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection...

CVE-2019-6491

CVE-2019-6491 affects RISI Gestao de Horarios v3201.09.08 rev.23 and is a SQL injection vulnerability. CVSSv3 base score 8.8 (HIGH): NETWORK, LOW attack complexity, PRIVs LOW, no user interaction; impacts Confidentiality, Integrity, Availability (HIGH). CVSSv2 base 6.5 (MEDIUM). No remediation de...

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019 Notice This security update was released March 12, 2019 for Windows 7 SP1 and Windows Server 2008 R2 SP1. This security update was updated May 14, 2019 to add support for Windows...

njiandan-cms cross-site request forgery vulnerability

njiandan-cms is a PHP-based content management system CMS. A cross-site request forgery vulnerability exists in njiandan-cms version 2013-05-23 and earlier. A remote attacker can exploit this vulnerability to add an administrator account with the help of the index.php/admin/usernew URL...

WordPress NativeChurch Multi-Purpose 5.0.x File Download

Exploit Title : WordPress NativeChurch Multi-Purpose Themes 5.0.x Arbitrary File Download Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : themeforest.net Software Information Link :...

devolo dLAN 550 duo+ 3.1.0-1 Starter Kit Remote Code Execution

devolo dLAN 550 duo+ Starter Kit Remote Code Execution Vendor: devolo AG Product web page: https://www.devolo.com Affected version: dLAN 500 AV Wireless+ 3.1.0-1 i386 Summary: Devolo dLANAr 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for a...

devolo dLAN 550 duo+ Starter Kit - Remote Code Execution

devolo dLAN 550 duo+ Starter Kit Remote Code Execution Vendor: devolo AG Product web page: https://www.devolo.com Affected version: dLAN 500 AV Wireless+ 3.1.0-1 i386 Summary: Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for an...

Green CMS 2.x Arbitrary File / Directory Download

Exploit Title: Green CMS 2.x - Arbitrary File & Directory Download Dork: N/A Date: 2019-01-25 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.greencms.net/ Software Link: https://codeload.github.com/GreenCMS/GreenCMS/zip/beta Version: 2.x Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

CVE-2017-15720

creationtimestamp| type| source ---|---|--- 2019-01-23 20:21:36+00:00| seen| https://t.me/cibsecurity/2199...

Joomla Akeeba Backup 6.3.3 Database Disclosure

Exploit Title : Joomla Akeeba Backup Components 6.3.3 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepage : akeebabackup.com Software Information Link : extensions.joomla.org/extension/akeeba-backup/ Software Download...

Joomla JVFramework 1.6.4.0 Database Disclosure

Exploit Title : Joomla JVFramework Components 1.6.4.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepages : joomlavi.com jvframework.com Software Download Link :...

Joomla FPSS Art Frontpage Slideshow 1.6.0 Database Disclose / SQL Injection

Exploit Title : Joomla FPSS Art Frontpage Slideshow Components 1.6.0 Database Disclosure / Open Redirection / SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepage : artetics.com Software Information Link :...

Joomla YoutubeGallery 4.5.8 Database Disclosure / SQL Injection

Exploit Title : Joomla YoutubeGallery Components 4.5.8 Database Disclosure and SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : joomlaboat.com Software Information Links : extensions.joomla.org/extension/youtube-gallery/...

Typo3 CMS Static Info Tables 6.7.3 Database Disclosure

Exploit Title : Typo3 CMS Static Info Tables Extension 6.7.3 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org - extensions.typo3.org/extension/staticinfotables/ Software Download Link :...

Typo3 CMS YAG Themepack jQuery 1.3.2 Database Disclosure

Exploit Title : Typo3 CMS YAG Themepack jQuery Extension 1.3.2 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org yag-gallery.de Software Download Link :...

Typo3 CMS Site Crawler 6.1.2 Database Disclosure

Exploit Title : Typo3 CMS Site Crawler Extension 6.1.2 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/crawler/6.1.2/zip/ Tested On : Window...

Typo3 CMS pw_highslide_gallery 0.3.1 Database Disclosure

Exploit Title : Typo3 CMS pwhighslidegallery Extension 0.3.1 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/pwhighslidegallery/0.3.1/zip/...

libdoc buffer out-of-bounds read vulnerability (CNVD-2018-26648)

libdoc is a C library for extracting text from MicroSoft doc files. A heap buffer out-of-bounds read vulnerability exists in the 'processfile' function of the reader.c file in libdoc version 2017-10-23 and earlier, which can be exploited by an attacker to cause a denial of service application cra...

Libdoc Buffer Out-of-Bounds Read Vulnerability

libdoc is a C library for extracting text from MicroSoft doc files. A heap buffer out-of-bounds read vulnerability exists in the 'getlong' function of the numutils.c file in libdoc versions 2017-10-23 and earlier, which can be exploited by an attacker to cause a denial of service application cras...

PrestaShop PM_ModalCart 1.6.1.4 Database Disclosure

Exploit Title : PrestaShop PMModalCart 1.6.1.4 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link : addons.prestashop.com/ru/pop-up/2438-modal-cart-3.html +...