Octeth Oempro 4.8 - (CampaignID) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

bruno-bachelier.com XSS vulnerability

Open Bug Bounty ID: OBB-501481 Description| Value ---|--- Affected Website:| bruno-bachelier.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

bruno-assenmacher.de XSS vulnerability

Vulnerable URL: http://www.bruno-assenmacher.de/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Yaxim and Bruno User Simulation Vulnerabilities

yaxim and Bruno are both products of Georg Lukas. yaxim Yet Another XMPP Instant Messenger is an XMPP client with a clean user interface and open source GPLv2. Bruno is the best Jabber / XMPP Instant Messaging IM application. Bruno is the best Jabber / XMPP Instant Messaging IM application. A use...

XMPP Clients User Impersonation Vulnerability

Exploit for multiple platform in category local exploits Multiple XMPP Clients User Impersonation Vulnerability Summary ------- An incorrect implementation of XEP-0280: Message Carbons0 in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerabl...

Design/Logic Flaw

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno 0.8.6 -...

CVE-2017-5589

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno 0.8.6 -...

CVE-2017-5589

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno 0.8.6 -...

CVE-2017-5589

Technical details about CVE-2017-5589 are not provided in the connected documents. The initial description mentions impersonation via XEP-0280 in Yaxim, but no concrete affected products, versions, impact, or fixes are given here. Monitor for updates.

CVE-2017-5589

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno 0.8.6 -...

PT-2017-16594

Name of the Vulnerable Software and Affected Versions yaxim and Bruno versions 0.8.6 through 0.8.8 SleekXMPP versions up to 1.3.1 Slixmpp versions up to 1.2.3 poezio versions 0.8 through 0.10 Movim versions 0.8 through 0.10 converse.js versions prior to 1.0.7 for 1.x or 2.0.5 for 2.x Description ...

Bruno Mars - Songs Quiz - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bruno Mars - Songs Quiz published at the 'play' market has multiple vulnerabilities...

SAP Host Agent Information Disclosure

This module attempts to retrieve Computer and OS info from Host Agent through the SAP HostControl service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'SAP Host Agen...

BS.Player <= 2.56 build 1043 DLL Hijacking Exploit (mfc71loc.dll)

Exploit for windows platform in category local exploits ================================================================= BS.Player int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved main; return 0; 0day.today 2018-04-08...

Adobe Dreamweaver CS5 <= 11.0 build 4909 DLL Hijacking (mfc90loc.dll)

Exploit for windows platform in category local exploits ===================================================================== Adobe Dreamweaver CS5 Version: int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved main; return 0;...

USN-114-1: kimgio vulnerability

Bruno Rohee discovered a buffer overflow in the PCX decoder of kimgio. If an attacker tricked a user into loading a malicious PCX image with a KDE application, he could exploit this to execute arbitrary code with the privileges of the user opening the image...