CVE-2019-13575

A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php...

PT-2019-13434 · Wpeverest +1 · Everest Forms +1

Name of the Vulnerable Software and Affected Versions: WPEverest Everest Forms plugin for WordPress versions through 1.4.9 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php. This coul...

Everest Forms <= 1.4.9 - SQL Injection

The Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Everest Forms SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Everest Forms is a form generation plugin used in it. A SQL injection vulnerability exists in WordPress Everest Forms. The vulnerabilit...

Design/Logic Flaw

A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...

CVE-2018-0157

A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending...

partners.everestbusinessfunding.com XSS vulnerability

Open Bug Bounty ID: OBB-586535 Description| Value ---|--- Affected Website:| partners.everestbusinessfunding.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

everest-sales.ru XSS vulnerability

Open Bug Bounty ID: OBB-385802 Description| Value ---|--- Affected Website:| everest-sales.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Everest Software PeakHMI Pointer Dereference Vulnerability

PeakHMI is a human-machine interface product used within industrial control systems. A security vulnerability exists in PeakHMI versions prior to 8.7.0.2 when handling carefully constructed packets. An attacker exploiting this vulnerability could cause the program to indirectly reference pointers...

CVE-2015-6454

Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service incorrect pointer dereference and daemon crash via a crafted packet...

CVE-2015-6454

CVE-2015-6454 affects PeakHMI prior to 8.7.0.2. When the video server is enabled, a crafted packet can trigger an untrusted pointer dereference, leading to a remote denial of service (daemon crash). Affected product: PeakHMI (industrial control systems) prior to version 8.7.0.2. Impact: remote cr...

CVE-2015-6454

Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service incorrect pointer dereference and daemon crash via a crafted packet...

Everest Software PeakHMI Pointer Dereference Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on August 20, 2015, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Josep Pi Rodriguez has identified two-pointer dereference vulnerabilities in the Everest Software LLC PeakHMI...

CVE-2014-7558

The Everest Poker aka com.wEverestPoker application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Everest Poker aka com.wEverestPoker application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7558

The CVE-2014-7558 entry concerns the Everest Poker Android app (package com.wEverestPoker) version 0.1. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided sou...