CVE-2017-15969: Improper Neutralization of Special Elements used in an SQL Command

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

IBM Daeja ViewONE Cross-Site Scripting Vulnerability

IBM Daeja ViewONE is a document viewer from IBM that supports TIFF, PDF and Office-based documents.IBM Daeja ViewONE Virtual, Daeja ViewONE Standard and Daeja ViewONE Professional are its different Daeja ViewONE Virtual, Daeja ViewONE Standard and Daeja ViewONE Professional are different versions...

allaboutjazz.com XSS vulnerability

Vulnerable URL:...

all-prints.com XSS vulnerability

Open Bug Bounty ID: OBB-339837 Description| Value ---|--- Affected Website:| all-prints.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

VHostScan - Virtual Host Scanner

A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 slidedeck. Key Benefits Quickly highlight unique content in catch-all scenarios Locate the outliers in catch-all scenarios whe...

HTTP Virtual Host Scanner: VHostScan

A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 Key Benefits Quickly highlight unique content in catch-all scenarios Locate the outliers in catch-all scenarios where results...

CVE-2017-14615

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the...

PT-2017-13581

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware versions prior to 12.0 Description A security issue was discovered in the XML-RPC interface of WatchGuard Fireware. When a failed login attempt is made to the login endpoint, if JavaScript code is embedded as the value of t...

PT-2017-13447

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows for local file inclusion via the tool list parameter also referred to as the url tool variable to the "module/tool all/select tool.php" endpoint. This can be...

Microsoft windows the latest kernel has a vulnerability bug flaws: pass to kill all Windows version-bug warning-the black bar safety net

enSilo the research staff of the invention, a Microsoft kernel flaws, onslaught can take to bypass the anti-virus system and loaded vicious thoughts software. The flaws exist in the PsSetLoadImageNotifyRoutine, affects Windows 2000 to Windows 10 all editions. ! Microsoft in Windows 2000 to enable...

ua.all.biz XSS vulnerability

Vulnerable URL: https://ua.all.biz/search/enterprises/1/?q=457%22onfocus=prompt%27XSSposed%27%20autofocus=%22=2134169=456 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4778 VIP website status:| Yes Coordinated...

PT-2017-13262

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface eonweb versions 5.1-0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the host list parameter to "module/tool all/select tool.php". This is due to the improper...

PT-2017-13263

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface eonweb versions 5.1-0 Description The issue is related to the module tool all/tools/snmpwalk.php in the EyesOfNetwork web interface, which does not properly restrict popen calls. This allows remote attackers to...

all-forum.net XSS vulnerability

Open Bug Bounty ID: OBB-286817 Description| Value ---|--- Affected Website:| all-forum.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

all-up.com XSS vulnerability

Open Bug Bounty ID: OBB-286816 Description| Value ---|--- Affected Website:| all-up.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

all-athletics.com XSS vulnerability

Open Bug Bounty ID: OBB-285706 Description| Value ---|--- Affected Website:| all-athletics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

all-net-flat.de XSS vulnerability

Vulnerable URL: http://www.all-net-flat.de/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 560451 VIP website status:| No Check all-net-flat.de SSL connection:| Grade: F Coordinated Disclosure Timeline:...

CVE-2017-10071: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: All Modules. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated...

The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.

Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP packets...

The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.

Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...