PT-2018-16846

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue allows remote authenticated users to bypass intended attachment-deletion restrictions. This is achieved by modifying the aid parameter. Recommendations For version X3.4, consider restricting access to...

CVE-2018-5259: Undefined Security Weakness

Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter...

Name+DOB+SSN=FAFSA Data Gold Mine

KrebsOnSecurity has sought to call attention to online services which expose sensitive consumer data if the user knows a handful of static details about a person that are broadly for sale in the cybercrime underground, such as name, date of birth, and Social Security Number. Perhaps the most...

Joomla Payage component 'aid' parameter SQL injection vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the 'aid' parameter of the Joomla Payage component, which allows an attacker to exploit the vulnerability to gain access to sensitive database information...

Joomla com_fidecalendar plugin 'aid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'aid' parameter of the Joomla comfidecalendar plugin. An attacker can exploit the vulnerability to access or modify database data...

WordPress PICA Photo Gallery Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. A SQL injection vulnerability exists in the parameter aid i...

Girl First Aid Flu Ambulance - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Girl First Aid Flu Ambulance published at the 'play' market has multiple vulnerabilities...

Baby and Child First Aid - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby and Child First Aid published at the 'play' market has multiple vulnerabilities...

Hearing Aid with Replay (Lite) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hearing Aid with Replay Lite published at the 'play' market has multiple vulnerabilities...

Poisoning - First Aid Lite - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Poisoning - First Aid Lite published at the 'play' market has multiple vulnerabilities...

Ear Assist: Hearing Aid App - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ear Assist: Hearing Aid App published at the 'play' market has multiple vulnerabilities...

Petralex Hearing aid - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Petralex Hearing aid published at the 'play' market has multiple vulnerabilities...

Researchers, FBI Warn of Nepal Earthquake Scams

The earthquake that hit Nepal late last month has caused untold damage in the region and kicked off a massive relief and aid effort. Attackers are loathe to let a chance like that go by, and they have concocted a number of schemes to deprive victims of their money and hope for relief funds. Aid...

Digital First Aid Kit Guide For Activists, First-Responders

A coalition of worldwide non-governmental organizations has compiled a guide for individuals at risk for cyberattacks as well as for anyone charged with helping activists, human rights organizations and journalists identify and respond to threats. The Digital First Aid Kit is available on Github...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

CVE-2014-4598

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

CVE-2014-4598: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

PT-2014-6011

Name of the Vulnerable Software and Affected Versions wp-tmkm-amazon plugin versions 1.5b and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the AID parameter in the...

PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...