1507 matches found
Memory corruption
In the Linux kernel before 5.0.3, a memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...
CVE-2019-16994
In the Linux kernel before 5.0, a memory leak exists in sitinitnet in net/ipv6/sit.c when registernetdev fails to register sitn-fbtunneldev, which may cause denial of service, aka CID-07f12b26e21a...
CVE-2019-16744
CVE-2019-16744 affects the eBrigade web application prior to version 5.0. The vulnerability is a SQL injection in evenements.php (cid parameter as described in multiple sources), allowing an attacker to execute arbitrary SQL commands via the application’s input. Impact is reported as high in CVE ...
PT-2019-14807
Name of the Vulnerable Software and Affected Versions eBrigade versions prior to 5.0 Description The issue is related to SQL Injection in the evenements.php file, specifically with the cid parameter. Recommendations For versions prior to 5.0, update to version 5.0 or later to resolve the issue...
Session fixation
In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...
SQL Injection Vulnerability in Xi'an Power Infinite Information Technology Co.
Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...
Microsoft DirectWrite AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readCharset
Microsoft DirectWrite AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readCharset -----===== Background =====----- AFDKO Adobe Font Development Kit for OpenType is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font handling library...
Sql injection
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...
CVE-2019-11880
CVE-2019-11880 affects CommSy
CVE-2019-11880
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...
CVE-2019-11880: Improper Neutralization of Special Elements used in an SQL Command
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...
PT-2019-12540
Name of the Vulnerable Software and Affected Versions CommSy versions 8.6.5 and earlier Description The issue is related to SQL Injection via the cid parameter. This allows for potential exploitation. The estimated number of potentially affected devices worldwide is not specified. There is no...
SQL injection vulnerability in the cid parameter of the ne***.asp page of the website builder system of Chengdu Power Infinite Technology Co.
Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...
CommSy 8.6.5 SQL Injection
Title: ====== CommSy 8.6.5 - SQL injection Researcher: =========== Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2019-11880 Timeline: ========= 2019-04-15 Vulnerability discovered 2019-04-15 Asked for security contact and PGP key 2019-04-16 Send details to the vendor...
CommSy 8.6.5 - SQL injection
Title: ====== CommSy 8.6.5 - SQL injection Researcher: =========== Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2019-11880 Timeline: ========= 2019-04-15 Vulnerability discovered 2019-04-15 Asked for security contact and PGP key 2019-04-16 Send details to the vendor...
CVE-2019-11452
whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...
PT-2019-12317
Name of the Vulnerable Software and Affected Versions whatsns version 4.0 Description The issue allows for SQL injection through the cid parameter in the /index.php?admin category/remove.html endpoint. Recommendations For version 4.0, avoid using the cid parameter in the /index.php?admin...
Yot CMS 3.3.1 SQL Injection
Exploit Title: Yot CMS 3.3.1 - 'aid' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://yot.sourceforge.io/ Software Link: https://ayera.dl.sourceforge.net/project/yot/Yot%203.3.1.zip Version: 3.3.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...
KORA 2.7.0 - 'cid' SQL Injection
Exploit Title: KORA 2.7.0 - SQL Injection Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.matrix.msu.edu/ Software Link: https://sourceforge.net/projects/kora/files/latest/download Version: 2.7.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1...