Lucene search
+L

1369 matches found

OSV
OSV
•added 2017/08/21 7:29 a.m.•15 views

DEBIAN-CVE-2017-12980

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as...

6.1CVSS6.4AI score0.01372EPSS
SaveExploits1References1
OSV
OSV
•added 2017/08/21 7:29 a.m.•13 views

UBUNTU-CVE-2017-12980

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as...

6.1CVSS6.7AI score0.01372EPSS
SaveExploits1References3
Packet Storm
Packet Storm
•added 2017/08/20 12:00 a.m.•30 views

Easy DVD Creator 2.5.11 Buffer Overflow

!/usr/bin/python Exploit Title: Easy DVD Creater 2.5.11 - 'Enter User Name' Field Buffer Overflow SEH Date: 19-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: Easy DVD Creater Vendor Homepage: http://www.divxtodvd.net/ Version: 2.5.11 Software Link:...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/08/19 12:00 a.m.•27 views

Easy DVD Creater 2.5.11 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Easy DVD Creater 2.5.11 - 'Enter User Name' Field Buffer Overflow SEH Date: 19-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: Easy DVD Creater Vendor Homepage: http://www.divxtodvd.net/ Version: 2.5.11 Software Link:...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/03/12 12:00 a.m.•20 views

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)

Easy MOV Converter 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.e...

SaveExploits0
CNVD
CNVD
•added 2017/02/16 12:00 a.m.•8 views

Joomla JE Form Creator Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Form Creator component, which can be exploited by attackers to access or modify database data...

8AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2017/02/14 12:00 a.m.•48 views

Joomla JE Form Creator 1.8 SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

0.2AI score
SaveExploits0
zdt
zdt
•added 2017/02/14 12:00 a.m.•28 views

Joomla JE Portfolio Creator 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Portfolio Creator v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeportfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

7.1AI score
SaveExploits0
zdt
zdt
•added 2017/02/14 12:00 a.m.•49 views

Joomla JE Form Creator 1.8 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/02/13 12:00 a.m.•47 views

Joomla! Component JE Form Creator 1.8 - 'Itemid' SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/02/13 12:00 a.m.•18 views

Joomla! Component JE Portfolio Creator 1.2 - d_itemid SQL Injection

Joomla! Component JE Portfolio Creator 1.2 - ditemid SQL Injection Exploit Title: Joomla! Component JE Portfolio Creator v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeportfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/02/13 12:00 a.m.•18 views

Joomla! Component JE Form Creator 1.8 - Itemid SQL Injection

Joomla! Component JE Form Creator 1.8 - Itemid SQL Injection Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

SaveExploits0
Exploit DB
Exploit DB
•added 2017/02/13 12:00 a.m.•43 views

Joomla! Component JE Portfolio Creator 1.2 - 'd_itemid' SQL Injection

Exploit Title: Joomla! Component JE Portfolio Creator v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeportfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

5.3AI score
SaveExploits0
OSV
OSV
•added 2017/02/07 5:59 p.m.•12 views

CVE-2016-5372

Cross-site request forgery CSRF vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

6.3CVSS5.8AI score0.00532EPSS
SaveExploits0References2
Prion
Prion
•added 2017/02/07 5:59 p.m.•27 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

6.8CVSS8AI score0.00532EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/02/07 5:59 p.m.•30 views

CVE-2016-5372

Cross-site request forgery CSRF vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

6.8CVSS6.9AI score0.00532EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/02/07 5:00 p.m.•44 views

CVE-2016-5372

Cross-site request forgery CSRF vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors...

6.9AI score0.00532EPSS
SaveExploits0References2
CVE
CVE
•added 2017/02/07 5:00 p.m.•77 views

CVE-2016-5372

NetApp Snap Creator Framework CVE-2016-5372 is a CSRF vulnerability affecting versions prior to 4.3.0P1. A remote attacker could hijack user authentication and, per CNVD details, perform unauthorized operations and gain privileges for affected applications via unknown vectors. Mitigation: upgrade...

6.8CVSS6.9AI score0.00532EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
•added 2017/01/21 12:00 a.m.•30 views

Vine VideoSite Creator Script SQL Injection

Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Vine VideoSite Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-vinezone-vine-videosite-creator-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

0.6AI score
SaveExploits0
zdt
zdt
•added 2017/01/20 12:00 a.m.•19 views

Vine VideoSite Creator Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Vine VideoSite Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-vinezone-vine-videosite-creator-script/ Author: Ihs...

7.1AI score
SaveExploits0
Rows per page
Query Builder