Oracle E-Business Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Wireless Framework subcomponent within the CRM Technical Foundation component that...

Apple Fixes Vulnerabilities Across OS X, iOS, Safari

Apple fixed dozens of vulnerabilities in its software on Monday, including 60 vulnerabilities in its operating system, OS X, and 43 in its mobile operating system, iOS. The OS X update graduates the desktop and server operating system to OS X El Capitan v10.11.6 and applies to anyone running OS X...

PHP Calendar Script 1.0 - User Credentials Disclosure

Exploit for php platform in category web applications Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version Download Link :...

PHP Planner 0.4 SQL Injection

PHP Planner SQL Injection Vulnerability , Discovered by NA , NAattutanota.com ================================================================================= Description =========== This is a basic PHP Calendar with lots of features and possiblities. Uses mySQL as backend and is fitted with an...

newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure

Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version Download Link : http://www.newsp.eu/calendar.zip Exploit :...

newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure

newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version...

About the security content of iOS 9.3.3

About the security content of iOS 9.3.3 This document describes the security content of iOS 9.3.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

WordPress Booking Calendar Plugin 6.2 - SQL Injection

Booking Calendar Plugin before 6.2 is prone to a SQL Injection vulnerability. The parameters are not sanitized properly in the wpdevgetargsfromrequestinbklisting function from booking/lib/wpdev-bk-lib.php line 709. It allows remote attackers to view data from the database by luring the target use...

WordPress Booking Calendar Plugin 6.2 - SQL Injection

Booking Calendar Plugin before 6.2 is prone to a SQL Injection vulnerability. The parameters are not sanitized properly in the wpdevgetargsfromrequestinbklisting function from booking/lib/wpdev-bk-lib.php line 709. It allows remote attackers to view data from the database by luring the target use...

Tiki-Wiki CMS Calendar Remote Command Execution

A remote command injection vulnerability exists in Tiki-Wiki CMS's calendar module. By exploiting this vulnerability, a remote attacker can execute arbitrary code on the affected server...

Joomla Simple Calendar 0.7.6 b SQL injection vulnerability

No description provided by source...

WebCalendar 1.2.7 - Multiple Vulnerabilities

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBCALENDAR-V1.2.7-CSRF-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ========================== www.k5n.us/webcalendar.php Product: ================== WebCalendar v1.2.7...

wnmu.edu XSS vulnerability

Vulnerable URL: http://www.wnmu.edu/faccal/calendar.php?year=2012=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 256972 VIP website status:| No Check wnmu.edu SSL connection:|...

libical heap out-of-bounds read vulnerability (CNVD-2016-04383)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

Libical Heap Out-of-Bounds Read Vulnerability

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

JIRA Mail.ru Calendar 2.4.2.50_JIRA6 Cross Site Scripting

Hello Team, I have identified Stored Cross Site Scripting Vulnerability in JIRA - Mail.ru Calendar Plugin. Overview-----------------------------------------------------------------------------------------------------------------------Vendor: JIRA Vulnerable Product: Mail.ru Calendar Plugin...

TikiWiki Calendar RCE Vulnerability - Active Check

Tiki Wiki CMS Groupware is prone to a remote code execution RCE vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki-Wiki CMS Calendar Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Tiki-Wiki CMS Calendar Command Execution', 'Description' = %q Tiki-Wiki CMS's calendar module contains a remote code execution...

Tiki Wiki CMS Calendar Remote Code Execution

Exploit Title: Tiki-Calendar-RCE Google Dork: inurl:tiki-calendar.php Date: 2015-12-16 Exploit Author: Dany Ouellet Vendor Homepage: https://tiki.org/article414-Important-Security-Fix-for-all-versions-of-Tiki Software Link: https://tiki.org/Download Version: ALL supported versions of Tiki 14.2,...

Tiki Wiki CMS Calendar 6.15/9.11 LTS/12.5 LTS/14.2 - Remote Code Execution

Exploit Title: Tiki-Calendar-RCE Google Dork: inurl:tiki-calendar.php Date: 2015-12-16 Exploit Author: Dany Ouellet Vendor Homepage: https://tiki.org/article414-Important-Security-Fix-for-all-versions-of-Tiki Software Link: https://tiki.org/Download Version: ALL supported versions of Tiki 14.2,...