9398 matches found
Serendipity blog component SQL injection vulnerability
Serendipity is a PHP-based blogging system. The system supports the creation of online diaries, blogs, web pages, etc. blog component is one of the blogging components. A SQL injection vulnerability exists in the blog component in Serendipity version 2.0.3. A remote attacker can exploit this...
OSX.Proton spreading through fake Symantec blog
Sunday night, a series of tweets from security researcher @noarfromspace revealed a new variant of the OSX.Proton malware, spreading in a concerning new method—spoofing security company Symantec's blog. Method of infection The malware is being promoted via a fake Symantec blog site at...
Windows Defender System Guard でシステムのセキュリティを強化し整合性を維持する
本記事は、Windows Security のブログ “Hardening the system and maintaining integrity with Windows Defender System Guard” 2017 年 10 月 23 日 米国...
Sql injection
Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure...
PT-2017-10831
Name of the Vulnerable Software and Affected Versions Serendipity version 2.0.3 Description The issue results in information disclosure due to a SQL injection in the blog component. Recommendations For version 2.0.3, update to a newer version that contains a fix for this issue. At the moment, the...
CVE-2017-1000129: Improper Neutralization of Special Elements used in an SQL Command
Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure...
zorovavi/blog SQL Injection Vulnerability
zorovavi/blog is a blogging system. A SQL injection vulnerability exists in zorovavi/blog 2017-10-17 and earlier. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the recept.php file to upload arbitrary files...
auxblogcms 1.0.6 Backend Login Bypass Vulnerability
auxblogcms is a php personal blog system based on PHP+MySQL program. auxblogcms 1.0.6 has a background bypass login vulnerability, which can be exploited by attackers to bypass background cookies and obtain sensitive information...
Dynamic News Magazine&Blog CMS SQL Injection Vulnerability
Dynamic News Magazine&Blog CMS is a content management system mainly used for information websites. A SQL injection vulnerability exists in Dynamic News Magazine&Blog CMS version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the admin/adminprocess.php file...
Heart Size: Yet Another Biometric
Turns out that heart size doesn't change throughout your adult life, and you can use low-level Doppler radar to scan the size -- even at a distance -- as a biometric. Research paper to be available soon...
blog.shortfusion.com XSS vulnerability
Vulnerable URL: http://blog.shortfusion.com/index.cfm/%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/c/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirm/WELCOME/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability...
Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change
In the init action, this plugin checked to see if $POST'likebtnimportconfig' is empty. If it’s not empty then it base64-decodes the string, parses it as JSON, and starts changing options. This could allow attackers to change blog settings such as the Site Title. The below form will set the “Site...
News Magazine And Blog CMS 1.0 SQL Injection
Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/ Version: 1.0 Category:...
Emlog blog system has an arbitrary file deletion vulnerability
emlog is a PHP and MySQL based blog and CMS builder. There is an arbitrary file deletion vulnerability in the Emlog blog system. The vulnerability is due to the program on the parameters of the filter is not strict due to the attacker by adding a malicious payload execution, you can delete...
Responsive Newspaper Magazine&Blog CMS SQL Injection Vulnerability
Responsive Newspaper Magazine&Blog CMS is a content management system mainly used for information websites. A SQL injection vulnerability exists in Responsive Newspaper Magazine&Blog CMS version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the...
Attack on Old ANSI Random Number Generator
Almost 20 years ago, I wrote a paper that pointed to a potential flaw in the ANSI X9.17 RNG standard. Now, new research has found that the flaw exists in some implementations of the RNG standard. Here's the research paper, the website -- complete with cute logo -- for the attack, and Matthew...
CVE-2017-15982
Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...
Sql injection
Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...