PT-2019-11675 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate Member plugin version 2.39 Description: An issue in the Ultimate Member plugin for WordPress allows unauthorized modification of user profiles and cover pictures. Once connected, an attacker can modify the profile and cover picture o...

Emerson 396571-02-6 Isolated Digital Input module Detection

Binary data 756503.prm...

Emerson 396571-04-2 Isolated Digital Input module Detection

Binary data 756504.prm...

Emerson 396571-07-7 Isolated Digital Input module Detection

Binary data 756505.prm...

Emerson 396572-02-2 Isolated Digital Output module Detection

Binary data 756506.prm...

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protocol...

CVE-2019-2445

Vulnerability in the Oracle Content Manager component of Oracle E-Business Suite subcomponent: Cover Letter. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28454)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

helha.be Improper Access Control vulnerability

Open Bug Bounty ID: OBB-695395 Description| Value ---|--- Affected Website:| helha.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden unt...

HackerOne: User with privilege to maintain External Programs can update certain churned HackerOne programs

Summary: You wrote that some programs are behind, but you are trying to get them back sorry maybe bad translation Description: Apparently because of a system error, I have access to change information in the public program. This option is given only for external programs.But here is a public...

cover-sd.com XSS vulnerability

Open Bug Bounty ID: OBB-582368 Description| Value ---|--- Affected Website:| cover-sd.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7665

An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beatsuploader.php or actions/photouploader.php, or the coverPhoto parameter to editaccount.php...

CVE-2017-8189

CVE-2017-8189 is a path traversal vulnerability in Huawei FusionSphere OpenStack, affecting FusionSphere OpenStack V100R006C00SPC102 (NFV). Root cause: insufficient path validation. A high-privilege attacker could traverse paths and overwrite/cover files, leading to service disruption (as per Hua...

Uber Reveals 2016 Breach of 57 Million User Accounts

Ride-hailing service Uber Technologies revealed Tuesday that the company suffered a breach of 57 million Uber user accounts in 2016. According to reports, Uber then attempted to cover up the incident by paying $100,000 to attackers to keep the hack a secret and delete the data. Dara Khosrowshahi,...

Fake Magazine Cover Script SQL Injection Vulnerability

Fake Magazine Cover Script is a script for creating magazine cover websites. Fake Magazine Cover Script suffers from a SQL injection vulnerability. An attacker can perform SQL injection via the rate.php value parameter or the content.php id parameter...

Sql injection

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15987

CVE-2017-15987 concerns Fake Magazine Cover Script with a SQL injection vulnerability exploitable via rate.php?value and content.php?id parameters. Multiple connected sources confirm the vulnerability and provide PoC payloads (e.g., UNION SELECT, CONCAT_WS with user/database/version) and exploit ...

TeamWork Job Links profileChange and coverChange arbitrary file upload vulnerability (CNVD-2017-33670)

TeamWork Photo Fusion is a web-based photo management system that allows users to upload photos or view other users' photos. changeAvatar and changeCover are both functional modules. changeAvatar is a module for changing a user's avatar. changeCover is a module for changing a cover. changeAvatar ...