CVE-2016-9421

CVE-2016-9421 describes a cross-site scripting (XSS) vulnerability in the MyBB Admin control panel, specifically in the Users module, prior to version 1.8.8 (and MyBB Merge System prior to 1.8.8). The root cause is an XSS condition that could allow remote attackers to inject arbitrary web script ...

CVE-2016-9409

CV E-2016-9409 is an XSS vulnerability in the admin control panel of MyBB (and MyBB Merge System) before version 1.8.7. The flaw allows remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs. It affects MyBB prior to 1.8.7, with impact limited to client-side sc...

CVE-2015-8974

The CVE affects MyBB (MyBulletinBoard) and relates to a SQL injection in the Group Promotions module of the admin control panel. Affected versions are MyBB before 1.6.18 and 1.8.x before 1.8.6; the issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Root cause...

CVE-2014-8362

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...

Design/Logic Flaw

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...

CVE-2014-8362

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...

CVE-2014-8362

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface...

CVE-2014-8362

The CVE-2014-8362 entry affects Vivint Sky Control Panel 1.1.1.9926 and describes a vulnerability where remote attackers can enable/disable the alarm system and modify other security settings through the Web-enabled interface. The connected documents corroborate a web-accessible vulnerability wit...

GLSA-201701-30 : vzctl: Security bypass

The remote host is affected by the vulnerability described in GLSA-201701-30 vzctl: Security bypass It was discovered that vzctl determined the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory. This allows local simfs container CT root...

vzctl: Security bypass

Background vzctl is a set of control tools for the OpenVZ server virtualization solution. Description It was discovered that vzctl determined the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory. This allows local simfs container CT ro...

MS14-057: Description of the security update for the .NET Framework 2.0 SP2 for Windows Vista SP2 and Windows Server 2008 SP2: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 2.0 SP2 for Windows Vista SP2 and Windows Server 2008 SP2: October 14, 2014 View products that this article applies to. Introduction This security update resolves vulnerabilities that could allow remote code execution if an...

GENEXIS devices with DRGOS remote code execution vulnerability

GENEXIS devices with DRGOS is an operating system for use in home network gateways from the Dutch company GENEXIS. A security vulnerability exists in the Parental control panel in GENEXIS devices with DRGOS versions prior to 1.14.1. A remote attacker can exploit the vulnerability with the help of...

XAMPP Control Panel - Denial Of Service

XAMPP Control Panel - Denial Of Service ''' + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product:...

XAMPP Control Panel Denial Of Service Exploit

XAMPP Control Panel suffers from a denial of service vulnerability. + Credits: John Page hyp3rlinx Vendor: ===================== www.apachefriends.org Product: =================== XAMPP Control Panel XAMPP is a free and open source cross-platform web server solution stack package developed by...

XAMPP Control Panel - Denial Of Service

''' + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product: =================== XAMPP Control Panel XAMPP...

XAMPP Control Panel Denial Of Service

Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/XAMPP-CONTROL-PANEL-MEMORY-CORRUPTION-DOS.txt + ISR: ApparitionSec Vendor: ===================== www.apachefriends.org Product: =================== XAMPP Control Panel XAMPP is a...

Vesta Control Panel 0.9.8-16 Local Privilege Escalation

!/bin/bash Exploit Title: Vesta Control Panel 0.9.7 suid.c PWN Make PWN shell scrip...

Vesta Control Panel 0.9.8-16 - Local Privilege Escalation

!/bin/bash Exploit Title: Vesta Control Panel 0.9.7 suid.c PWN Make PWN shell script executable. chmod +x PWN Inject command to run PWN into v-get-web-domain-value paramet...

Vesta Control Panel 0.9.8-16 - Local Privilege Escalation

Vesta Control Panel 0.9.8-16 - Local Privilege Escalation !/bin/bash Exploit Title: Vesta Control Panel 0.9.7 suid.c PWN Make PWN shell script executable. chmod...

WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...