SUSE CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

Prima Systems FlexAir Authentication Bypass (CVE-2019-7667)

An authentication bypass vulnerability exists in Prima Systems FlexAir Access Control Database. Successful exploitation of this vulnerability could allow an attacker to download the database file, disclose login information, and have full access to the system...

FlexAir Access Control 2.3.35 - Authentication Bypass

Exploit Title: FlexAir Access Control 2.3.35 - Authentication Bypass Google Dork: NA Date: 2019-11-11 Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/ Version: 2.3.35 Tested on: NA...

FlexAir Access Control 2.3.35 - Authentication Bypass Exploit

Exploit for hardware platform in category web applications Exploit Title: FlexAir Access Control 2.3.35 - Authentication Bypass Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/...

Prima FlexAir Access Control 2.3.35 Database Backup Predictable Name

!/usr/bin/env python -- coding: utf8 -- Prima FlexAir Access Control 2.3.35 Database Backup Predictable Name Exploit Authentication Bypass Login with MD5 hash CVE: CVE-2019-7666, CVE-2019-7667 Advisory: https://applied-risk.com/resources/ar-2019-007 Paper:...

CVE-2019-7667

CVE-2019-7667 affects Prima Systems FlexAir (versions 2.3.38 and prior). The flaw is that database backup files are created with predictable names, allowing brute-force identification of the backup file. An attacker could download the backup, obtain login information, and bypass authentication to...

Debian: Security Advisory (DLA-1311-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : adminer (openSUSE-2018-253)

This update for adminer fixes the following issues : - Sync up conditional sub-packages with devel package to disable uninstallable pacakges for boo1002214. - Update to version v4.4.0 for boo1083948 to resolve CVE-2018-7667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2018-7667

CVE-2018-7667 affects Adminer up to version 4.3.1, where an SSRF flaw exists via the server parameter. The issue enables an attacker to trigger server-side requests, potentially bypassing firewalls and probing internal resources. The vulnerability is rated high/critical (NVD CVSS v2 7.5, CVSS v3....

CVE-2018-7667

Adminer through 4.3.1 has SSRF via the server parameter...

CVE-2015-7667

CVE-2015-7667 concerns the WordPress ResAds plugin (versions before 1.0.2). The vulnerability is a cross-site scripting (XSS) flaw in templates/admanagement/admanagement.php and templates/adspot/adspot.php that allows remote attackers to inject arbitrary script or HTML via the page parameter. Aff...

CVE-2015-7667

Multiple cross-site scripting XSS vulnerabilities in 1 templates/admanagement/admanagement.php and 2 templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2017-7667

CVE-2017-7667 affects Apache NiFi versions prior to 0.7.4 and 1.x prior to 1.3.0. The issue is an Origin Validation/Framing problem where NiFi did not set a suitable X-Frame-Options header, leaving the application vulnerable to cross-frame framing attacks. Connected advisories (GHSA/JQ99, CNVD/CN...

CVE-2016-7667

CVE-2016-7667 affects Apple’s CoreText in iOS before 10.2 and macOS before 10.12.2. A crafted string can cause a denial of service. Apple patches are included in macOS 10.12.2 and iOS 10.2 (see HT207423/HT207422). Remediation: update to the corresponding Apple security updates. MITRE/ATT&CK not d...

Multiple Reflected XSS in ResAds version 1.0.1 WordPress plugin

Vulnerability title: Multiple Reflected XSS in ResAds version 1.0.1 WordPress plugin CVE: CVE-2015-7667 Vendor: WordPress web-mv Product: ResAds Affected version: 1.0.1 Fixed version: 1.0.2 Reported by: Iberia Medeiros Vulnerability Details: ===================== It was discovered that no...

WordPress ResAds 1.0.1 Cross Site Scripting

Vulnerability title: Multiple Reflected XSS in ResAds version 1.0.1 WordPress plugin CVE: CVE-2015-7667 Vendor: WordPress web-mv Product: ResAds Affected version: 1.0.1 Fixed version: 1.0.2 Reported by: Ibéria Medeiros Vulnerability Details: ===================== It was discovered that no...

WordPress ResAds 1.0.1 Cross Site Scripting Vulnerability

WordPress ResAds plugin version 1.0.1 suffers from multiple reflective cross site scripting vulnerabilities. Vulnerability title: Multiple Reflected XSS in ResAds version 1.0.1 WordPress plugin CVE: CVE-2015-7667 Vendor: WordPress web-mv Product: ResAds Affected version: 1.0.1 Fixed version: 1.0....

CVE-2014-7667

The Coca-Cola FM Honduras Android app (com.enyetech.radio.coca_cola.fm_hn) version 2.0.41725 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided documents do not specify...

Fedora Update for initscripts FEDORA-2008-7667

Check for the Version of initscripts OpenVAS Vulnerability Test Fedora Update for initscripts FEDORA-2008-7667 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...