CVE-2020-21176

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

ThinkJS SQL注入漏洞

ThinkJS is a Node.js framework for future-proof development that integrates a wide range of project best practices to make enterprise-level development easier and more efficient. A SQL injection vulnerability exists in the model.increment and model.decrease functions in ThinkJS 3.2.10. A remote...

UBUNTU-CVE-2020-8226

A vulnerability exists in phpBB v3.2.10 and v3.3.1 which allowed remote image dimensions check to be used to SSRF...

WordPress Imagely NextGEN Gallery Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Imagely NextGEN Gallery is an image gallery plugin used in it. A SQL injection vulnerability exists in WordPress Imagely NextGEN Galler...

CVE-2019-13178

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set...

CVE-2018-10235

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...

Code injection

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...

CVE-2018-10235

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...

Saxum Picker, 3.2.10, SQL Injection

Saxum Picker, vesions 3.2.10 and previous, SQL Injection...

CVE-2018-7178

CVE-2018-7178 describes an SQL Injection in the Joomla! Saxum Picker component (version 3.2.10 and earlier) via the publicid parameter. The issue affects Saxum Picker and has high to critical impact: CVSS v3.0 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, and no us...

Joomla! Component Saxum Picker 3.2.10 - SQL Injection

Exploit Title: Joomla! Component Saxum Picker 3.2.10 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/sports-a-games/games/saxumpicker/ Software Download:...

Pelco VideoXpert 1.12.105 - Information Disclosure

Pelco VideoXpert 1.12.105 - Information Disclosure Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: 2.0.41 1.14.7 1.12.105 Summary: VideoXpert is a video management solution...

Event Registration Pro,3.2.12 - 3.2.10,SQL Injection

Event Registration Pro,3.2.12 - 3.2.10,SQL Injection resolution: update to 3.2.13 update notice: https://www.joomlashowroom.com/blog/event-registration-pro-3-2-13-released-security-release...

Ubiquiti Networks UniFi 3.2.10 Cross Site Request Forgery

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Ubiquiti Networks UniFi Vendor URL: www.ubnt.com Type: Cross-Site Request Forgery CWE-353 Date found: 2015-03-19 Date published: 2016-02-23 CVSSv3 Score: 6.3...

Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery

Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Ubiquiti Networks UniFi Vendor URL: www.ubnt.com Type: Cross-Site Request Forgery CWE-353 Date found: 2015-03-19 Date published:...

Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Ubiquiti Networks UniFi Vendor URL: www.ubnt.com Type: Cross-Site Request Forgery CWE-353 Date found: 2015-03-19 Date published: 2016-02-23 CVSSv3 Score: 6.3...

Music-Animation-Machine-MIDI-Player-SEH

Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 junk='\x41' 112 seh='\xeb\x06\x90\x90' pad='\x90' 10 junk2='\x42' 9496 Sor...

Null pointer dereference

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

Fedora 16 : kernel-3.2.10-3.fc16 (2012-3712)

Update to the 3.2.10 stable release, which contains a number of fixes across the kernel. Fixes CVE-2012-1146 Fixes CVE-2012-1179 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

UBUNTU-CVE-2012-1146

The memcgroupusageunregisterevent function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have...