CVE-2017-9100

CVE-2017-9100 affects D-Link DIR-600M devices running firmware 3.04. The vulnerability is an authentication bypass in login.cgi that allows a remote attacker to bypass login by submitting more than 20 blank spaces in the password field during an admin login attempt. Impact is unauthenticated admi...

DLink DIR-600M Wireless N 150 - Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass Date: 19-05-2017 Software Link: http://www.dlink.co.in/products/?pid=DIR-600M Exploit Author: Touhid M.Shaikh Vendor : www.dlink.com Contact : http://twitter.com/touhidshaikh...

D-Link DIR-600M Wireless N 150 Authentication Bypass

Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass Date: 19-05-2017 Software Link: http://www.dlink.co.in/products/?pid=DIR-600M Exploit Author: Touhid M.Shaikh Vendor : www.dlink.com Contact : http://twitter.com/touhidshaikh22 Version: Hardware version: C1 Firmware version: 3.04...

D-Link DIR-600M Wireless N 150 - Authentication Bypass

D-Link DIR-600M Wireless N 150 - Authentication Bypass Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass Date: 19-05-2017 Software Link: http://www.dlink.co.in/products/?pid=DIR-600M Exploit Author: Touhid M.Shaikh Vendor : www.dlink.com Contact : http://twitter.com/touhidshaikh22...

D-Link DIR-600M Wireless N 150 - Authentication Bypass

Exploit Title: D-Link DIR-600M Wireless N 150 Login Page Bypass Date: 19-05-2017 Software Link: http://www.dlink.co.in/products/?pid=DIR-600M Exploit Author: Touhid M.Shaikh Vendor : www.dlink.com Contact : http://twitter.com/touhidshaikh22 Version: Hardware version: C1 Firmware version: 3.04...

EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection

------------------------------------------------------------------------ EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection ------------------------------------------------------------------------ Han Sahin, November 2014...

EMC Secure Remote Services Virtual Edition SQL Injection Vulnerability

An SQL injection vulnerability was found in EMC Secure Remote Services Virtual Edition ESRS VE that allows an attacker to retrieve arbitrary data from the application, interfere with its logic, or execute commands on the database server itself...

CVE-2014-2374

The CVE-2014-2374 entry concerns the AXN-NET Ethernet module (v3.04) for the Accuenergy Acuvim II. The vulnerability arises from client-side JavaScript validation on the module’s web server, enabling authenticated? or remote attackers to bypass authentication and disclose passwords and modify set...

CVE-2014-2374 Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript...

XT:Commerce 3.04 Index.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22698/info xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Foxit Advanced PDF Editor Buffer Overflow Vulnerability

The host is installed with Foxit Advanced PDF Editor and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfoxitadvancedpdfeditorbofvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Foxit Advanced PDF Editor Buffer Overflow Vulnerability Authors: Arun Kallavi Copyright:...

Foxit Advanced PDF Editor Buffer Overflow Vulnerability

Foxit Advanced PDF Editor is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress 3.04 XSS

WordPress 3.04 最新XSS跨站漏洞 author:QQ吻 Team:Crack8小组 Blog http://hi.baidu.com/qhack8 发现评论下方提示 可以以HTML代码提交评论 就习惯性的测试一下 看能不能X他吗的个SS出来 然后 用K8全能黑客记事本里的XSS语句测试 结果发现 以管理员身分登陆 对文章评论提交以下语句 测试中发现 以普通用户进行评论 就算管理员通过 所提交的XSS代码 也会被WP清空掉（测试几句都是这样） 从WP的数据库里看 以USER权限登陆的 提交的 被清空了 别的语句还未测试 以下代码 有挂马 查看COOKIE 等 HTML代码...

CVE-2009-1945

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-1945

SQL injection vulnerability in webCal3detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the eventid parameter...

CVE-2009-1945

The CVE-2009-1945 entry documents a SQL injection vulnerability in WebCal 3.04, specifically in webCal3_detail.asp, exploitable via the event_id parameter. The underlying issue allows remote execution of arbitrary SQL commands. Affected software is WebCal 3.04; the vulnerability is confirmed in m...

XOOPS Module My_eGallery 3.04 - 'gid' SQL Injection

XOOPS Module MyeGallery 3.04 download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/myegallery" EXPLOIT :...

CVE-2000-1243

The CVE-2000-1243 entry concerns Dansie Shopping Cart 3.04 (likely earlier) with a privacy leak where sensitive data, including user credentials, is sent to an email address controlled by the product developers. The vulnerability is described as a data leakage issue rather than a remote code exec...

XT:Commerce 3.04 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22698/info xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. xt:Commerce 3.04 and prior...