PHPLive 4.4.8 4.5.4 - Password Recovery SQL Injection

PHPLive 4.4.8 4.5.4 - Password Recovery SQL Injection !/bin/env python Exploit title: Password Recovery Sql Injection Exploit Author: Tiago Carvalho Vendor Homepage: http://www.phplivesupport.com/?plk=osicodes-5-ykq-m Version : 4.4.8 - 4.5.4 Product Name: Phplive Tested on: Debian \ Kali linux...

mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previo...

The vulnerability of the MySQL database management system allows attackers to manipulate the accessibility of information.

The vulnerability of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise accessibility by affecting the Optimizer server...

Oracle Database Server RDBMS Security Component Data Read Vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation, of which RDBMS Security is a database security storage component. A data read vulnerability exists in the RDBMS Security component of Oracle Database Server version 12.1.0.1 and 12.1.0.2, which can be...

Unspecified Vulnerability in Oracle Database Server RDBMS Security Component

Oracle Database Server is a relational database management system from Oracle Corporation, of which RDBMS Security is a database security storage component. An unspecified vulnerability in the RDBMS Security component of Oracle Database Server can be exploited by a local attacker to update, inser...

CVE-2016-0691

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690...

Refueling database - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Refueling database published at the 'play' market has multiple vulnerabilities...

DbDat - Db Database Assessment Tool

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

CVE-2016-2047

The sslverifyservercert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name...

USN-2881-1 mysql-5.5, mysql-5.6 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.47 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Ubuntu 15.04 and Ubuntu 15.10 have been updated to MySQL 5.6.28. In addition to security fixes, th...

SQL Injection in webSPELL

High-Tech Bridge Security Research Lab discovered two vulnerabilities in a popular CMS webSPELL developed for the needs of esport related communities. The vulnerability allows a remote authenticated attacker with cashbox access privileges to execute arbitrary SQL commands in application’s databas...

Design/Logic Flaw

Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...

CVE-2015-7828

SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the 1 fcopydir, 2 fmkdir, 3 frmdir, 4 getenv, 5 dumpenv, 6 fcopy, 7 fput, 8 fdel, 9 fmove, 10 fget, 11 fappend, ...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server sub-component: The InnoDB database management system in MySQL is vulnerable to errors in its code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server sub-component: The InnoDB database management system in MySQL is vulnerable to errors in its code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

JVN#18232032: MATCHA INVOICE vulnerable to SQL injection

MATCHA INVOICE provided by ICZ Corporation is a web-based billing management software. MATCHA INVOICE contains multiple SQL injection CWE-89 vulnerabilities. Impact An authenticated attacker may obtain or alter information stored in the database. Solution Update the Software Update to the latest...

sysPass 1.0.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.0.9 and below Tested Versions: 1.0.9 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Fixed Vendor Notification: 2014-07-27 Solution Date: 2014-08-04...

CVE-2015-3727

CVE-2015-3727 affects WebKit in Apple Safari (and WebKitGTK builds) where the product does not properly restrict rename operations on WebSQL tables. The result is that a remote attacker can have a crafted site access an arbitrary web site’s WebSQL database. Affected versions include Safari before...

CVE-2015-4109 - WordPress Users Ultra Plugin [SQL injection]

Exploit Title: CVE-2015-4109 - WordPress Users Ultra Plugin SQL injection Date: 2015/05/30 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/ Version: 1.5.15 Tested on: WordPre...

Design/Logic Flaw

The session.flush function in the cacheddb backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key...