6163 matches found
CVE-2018-7284
creationtimestamp| type| source ---|---|--- 2018-02-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44184...
Design/Logic Flaw
install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value...
CVE-2018-7466
install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value...
CVE-2018-7466
install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value...
CVE-2018-7466: Improper Control of Generation of Code
install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value...
PT-2018-18084
Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.9.17 Description The issue allows remote attackers to conduct injection attacks by providing a long, crafted value during the installation process, leveraging control over DB LOGIN NAMES data in the...
UBUNTU-CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
DEBIAN-CVE-2018-7260
Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Joomla! Component Advertisement Board 3.1.0 - 'catname' SQL Injection
Exploit Title: Joomla! Component Advertisement Board 3.1.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://ordasoft.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/classified-ads/advertisement-board/ Version: 3.1.0 Category: Webapps Teste...
LogicalDOC Enterprise 7.7.4 Username Enumeration Weakness
Summary LogicalDOC is a free document management system that is designed to handle and share documents within an organization. LogicalDOC is a content repository, with Lucene indexing, Activiti workflow, and a set of automatic import procedures. Description The weakness is caused due to the...
Geovision Inc. IP Camera Multiple Vulnerabilities
Geovision Inc. IP Camera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Debian: Security Advisory (DLA-1135-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
db-ip.com XSS vulnerability
Open Bug Bounty ID: OBB-549184 Description| Value ---|--- Affected Website:| db-ip.com Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on ISO 29147...
Cross-site Scripting (XSS)
sentry-provider-db is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as HTTP TRACE requests are possible, which can lead to XSS attacks...
ALLMediaServer 0.95 - Remote Buffer Overflow
!/usr/bin/python Exploit Title: Stack Buffer Overflow in ALLMediaServer 0.95 Exploit Author: Mario Kartone Ciccarelli Contact: https://twitter.com/Kartone CVE: CVE-2017-17932 Date: 09-01-2018 Thanks to PoC: https://www.exploit-db.com/exploits/43406/ Software link:...
Exploit for Inadequate Encryption Strength in Telerik Ui_For_Asp.Net_Ajax
RAUcrypto !Languagehttps://img.shields.io/badge/Lang-Pyth...
Information disclosure
SonicWall SonicOS on Network Security Appliance NSA 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens...
CVE-2018-5281
SonicWall SonicOS on Network Security Appliance NSA 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens...
CVE-2018-5281
SonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices is affected by a cross-site scripting (XSS) vulnerability via the CFS Custom Category and Cloud AV DB Exclusion Settings screens. The available connected data confirms the affected product and the vulnerability class, but does ...
CVE-2018-5281: Improper Neutralization of Input During Web Page Generation
SonicWall SonicOS on Network Security Appliance NSA 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens...