CVE-2013-4374

CVE-2013-4374 describes an insecure temporary file storage vulnerability in the RHQ MongoDB Drift Server up to 2013-09-25, triggered when unpacking zipped files. The flaw causes unpacked files to land in a world-writable directory, which could permit local attackers to modify/tamper with files an...

CVE-2013-4374

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

PT-2019-6946

Name of the Vulnerable Software and Affected Versions RHQ Mongo DB Drift Server versions prior to 2013-09-25 Description A temporary file vulnerability exists when unpacking zipped files, potentially allowing for insecurity. Recommendations For versions prior to 2013-09-25, at the moment, there i...

CVE-2013-4374: Exposure of Resource to Wrong Sphere

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow (SEH)

Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow SEH Google Dork: N/A Date: 2019-10-30 Exploit Author: Doan Nguyen 4ll4u Vendor Homepage:https://www.alloksoft.com/ Software Link: https://www.alloksoft.com/wmv.htm Version: v4.6.1217 Tested on: Windows XP SP3 CVE : N/A...

Part-DB 0.4 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications...

Part-DB 0.4 - Authentication Bypass

Part-DB 0.4 - Authentication Bypass Exploit Title: Part-DB 0.4 - Authentication Bypass Date: 2019-10-26 Author: Marvoloo Vendor Homepage: https://github.com/Part-DB/Part-DB/ Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip Version: 0.4 Tested on: Linux CVE : N/A Discription:...

Part-DB 0.4 Authentication Bypass

Exploit Title: Part-DB 0.4 - Authentication Bypass Date: 2019-10-26 Author: Marvoloo Vendor Homepage: https://github.com/Part-DB/Part-DB/ Software Link: https://github.com/Part-DB/Part-DB/archive/master.zip Version: 0.4 Tested on: Linux CVE : N/A Discription: Easy authentication bypass...

CVE-2015-0270

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter...

CVE-2015-0270

Zend Framework versions affected: <2.2.10 and with a potential SQL injection in the PostgreSQL Zend\Db adapter. Root cause: improper handling/validation in the Zend\Db adapter leading to injectable SQL when interacting with PostgreSQL. Impact: potential disclosure or modification of data via ...

PT-2019-3686

Name of the Vulnerable Software and Affected Versions Siebel Core - DB Deployment and Configuration versions prior to 19.8 Description The issue is related to inadequate access control in the Siebel Core - DB Deployment and Configuration component of Oracle Siebel CRM. This can be exploited by a...

Oracle Siebel Core - DB Deployment and Configuration CVE-2019-2965 Remote Security Vulnerability

Description Oracle Siebel Core - DB Deployment and Configuration is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Install - Configuration' component is affected. This vulnerability affects the following supported versions: 19.8 and pri...

Express Invoice 7.12 - (Customer) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting Exploit Author: Debashis Pal Vendor Homepage: https://www.nchsoftware.com/ Source: https://www.nchsoftware.com/invoice/index.html Version: Express Invoice v7.12 C...

Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting

Exploit Title: Express Invoice 7.12 - 'Customer' Persistent Cross-Site Scripting Exploit Author: Debashis Pal Date: 2019-10-13 Vendor Homepage: https://www.nchsoftware.com/ Source: https://www.nchsoftware.com/invoice/index.html Version: Express Invoice v7.12 CVE : N/A Tested on: Windows 7 SP132bi...

PT-2019-7441

Name of the Vulnerable Software and Affected Versions The ThemeMakers Car Dealer / Auto Dealer Responsive theme versions through 2015-05-15 Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for...

PT-2019-7444

Name of the Vulnerable Software and Affected Versions ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a...

PT-2019-7447

Name of the Vulnerable Software and Affected Versions ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct...

PT-2019-7417

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier for WordPress Description The issue concerns SQL injection via the count parameter in the pk stt2 db get popular terms function, which is exploitable via CSRF. This allows for potential...

CVE-2008-3197

Cross-site request forgery CSRF vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to 1 the db parameter in the "Creating a Database" functionality dbcreate.php, and 2 the convcharset and collationconnection parameters related...

U.S. Dept Of Defense: Followup - SQL Injection - https://██████████/██████/MSI.portal

Summary: Time based blind sql injection for parameter MSIadditionalFilterType1, at the following URL: https://███/███/MSI.portal?nfpb=true&pageLabel=msiportalpage61 Description: This is a follow up to a previous report I submitted: https://hackerone.com/reports/674838 The following page has a for...