Echo Mirage 3.1 Buffer Overflow

!/usr/bin/python Exploit Title: Echo Mirage 3.1 Buffer Overflow PoC Stack Overflow Date: 21-01-2019 Software Link: https://sourceforge.net/projects/echomirage.oldbutgold.p/ Version: 3.1 x64 Exploit Author: InitD Community Contact: https://twitter.com/initdsh Website: http://initd.sh/ Tested on:...

Information Disclosure

atomic-openshift is vulnerable to information disclosure attacks. The vulnerability exists as Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by readin...

CloudBees Jenkins Config File Provider Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task.Config File Provider Plugin is...

OpenRefine XML External Entity Injection Vulnerability

OpenRefine is a standalone open source desktop application for data cleaning and converting data to other formats. An XML External Entity Injection XXE vulnerability exists in the data import function in OpenRefine versions 3.1 and earlier. The vulnerability can be exploited to read arbitrary fil...

CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

SaltOS SQL Injection Vulnerability

SaltOS is a suite of enterprise management solutions from the SaltOS program. The product integrates features such as CRM Customer Relationship Management and ERP Enterprise Resource Planning. A SQL injection vulnerability exists in SaltOS version 3.1 r8126, which can be exploited by remote...

SaltOS SQL Injection Vulnerability (CNVD-2019-00827)

SaltOS is a suite of enterprise management solutions from the SaltOS program. The product integrates features such as CRM Customer Relationship Management and ERP Enterprise Resource Planning. A SQL injection vulnerability exists in SaltOS version 3.1 r8126, which can be exploited by remote...

CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

CVE-2018-18763

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=SQL SQL Injection...

CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

Sql injection

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=SQL SQL Injection...

Sql injection

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

CVE-2018-18761

SaltOS 3.1 r8126 is affected by a SQL injection via action=login&querystring=&user=[SQL], enabling remote attackers to view/modify/delete data in the back-end DB. Descriptions in CNVD/NVD indicate high-severity risk (CVE-2018-18761; CVSS v3.1 base score 9.8). The provided documents do not include...

CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

CVE-2018-18763

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=SQL SQL Injection...

Fedora Update for python-requests FEDORA-2018-41320b315a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SaltOS Erp Crm 3.1 r8126 - Database File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: SaltOS Erp, Crm 3.1 r8126 - Database File Download Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: http://download.saltos.org/?app=saltos&format=xul&arch=win32 Version: 3.1 r0 / 3.x Category:...

SaltOS Erp Crm 3.1 r8126 SQL Injection

Exploit Title: SaltOS Erp, Crm 3.1 r8126 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: http://download.saltos.org/?app=saltos&format=xul&arch=win32 Version: 3.1 r0 / 3.x Category: Webapps Tested on:...

SaltOS Erp Crm 3.1 r8126 - SQL Injection

Exploit Title: SaltOS Erp, Crm 3.1 r8126 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: http://download.saltos.org/?app=saltos&format=xul&arch=win32 Version: 3.1 r0 / 3.x Category: Webapps Tested on:...

SaltOS Erp Crm 3.1 r8126 - Database File Download

SaltOS Erp Crm 3.1 r8126 - Database File Download Exploit Title: SaltOS Erp, Crm 3.1 r8126 - Database File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: http://download.saltos.org/?app=saltos&format=xul&arch=win32 Version:...