1887 matches found
Posty 1.0 SQL Injection
======================================================== Posty SQL injection Authentication bypass Description : an attacker is able to inject malicious sql query to bypass the login page and login as normal user Proof of Concept : - http://localhost/login.php set username and password = PCS00442...
FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (473b6a9e-8493-11e7-b24b-6cf0497db129)
Drupal Security Team : CVE-2017-6923: Views - Access Bypass - Moderately Critical CVE-2017-6924: REST API can bypass comment approval - Access Bypass - Moderately Critica CVE-2017-6925: Entity access bypass for entities that do not have UUIDs or have protected revisions - Access Bypass - Critical...
REST API can bypass comment approval.
More info at https://www.drupal.org/SA-CORE-2017-004...
REST API can bypass comment approval.
More info at https://www.drupal.org/SA-CORE-2017-004...
DALIM SOFTWARE ES Core 5.0 build 7184.1 - Directory Traversal
DALIM SOFTWARE ES Core 5.0 build 7184.1 Multiple Remote File Disclosures Vendor: Dalim Software GmbH Product web page: https://www.dalim.com Affected version: ES/ESPRiT 5.0 build 7184.1 build 7163.2 build 7163.0 build 7135.0 build 7114.1 build 7114.0 build 7093.1 build 7093.0 build 7072.0 build...
Legal Robot: Code injection
A security researcher discovered that they were able to inject potentially malicious code into Legal Robot's newly created Roadmap page through improper input sanitization when submitting a new Idea for consideration by the community. A limited-scope attack was possible since the input sanitizati...
Cross-site Scripting (XSS)
Moodle is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the course summary field on the course request pending approval page...
ib-lenhardt.com XSS vulnerability
Vulnerable URL: https://www.ib-lenhardt.com/en/type-approval.php?continent=1"...
FedRAMP Readiness Assessment Report (RAR) template launched
As part of the FedRAMP Accelerated process, cloud service providers CSPs can now complete a Readiness Assessment Report RAR to demonstrate their readiness for the FedRAMP process. The RAR is required for CSPs pursuing the FedRAMP JAB approval route. CSPs should also consider having a Readiness...
China makes VPNs illegal to tighten its Great Firewall
China is long known for its strict Internet censorship laws through the Great Firewall of China – China's Golden Shield project that employs a variety of tricks to censor Internet and block access to various foreign websites in the country by its government. The Great Firewall has blocked some 17...
4Images 1.7.13 - SQL Injection Vulnerability
Exploit for php platform in category web applications vulnerable app : 4images query$sql; Input parameter orderby is not sanitized before being passed to the sql query which lead to sql injection flaw POC GET...
ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure Vulnerability
Exploit for jsp platform in category web applications Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets Date: 18 October 2016 Author: p0z Vendor: ManageEngine Vendor Homepage: https://www.manageengine.com/ Product: ServiceDesk Plus Version: 9.2 Build 9207 Other versions...
SQL Injection Vulnerability in Shandong Wave Administrative Approval Service System
The Administrative Service System is a comprehensive administrative service system that integrates information and consultation, approval and fee collection, management and coordination, and complaint and supervision. SQL injection vulnerability exists in Shandong Wave Administrative Approval...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Pivotal Cloud Foundry PCF before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops...
CVE-2016-6637 UAA CSRF Vulnerability for OAuth Approvals | Cloud Foundry
CVE-2016-6637 UAA CSRF Vulnerability for OAuth Approvals Low Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry release v241 and earlier versions UAA release v2.0.0 – v2.7.4.6 & v3.0.0 – v3.6.0 UAA bosh release v15 & earlier versions Description The profile and authorize approval pag...
Harvest: CSRF bypass on Submit Time sheet for Approval
Hi Team, Description : There is a Authentication token is provided for submitting Time sheet for approval. Also there is a Referral given in header. But both are not validating on server side which leads to successful CSRF attack. HTML POC : Let me know if you need any other details regarding thi...
Harvest: Project Manager can approve pending reports(Access control Issue)
Hi Team, Description : Project manager can't access the Pending approval section of Timesheet. So he should not be able to approve any reports of any user. But the approve report is working for project manager and he is able to approve reports of any user. Vulnerable HTTP request : POST...
The wave of government approval platform ECGAP /FeedBack/ProcessValue. aspx file num parameter SQL injection vulnerability
No description provided by source...