Sql injection

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...

CVE-2019-14968

An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...

[SECURITY] [DLA 1751-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u4 CVE ID : CVE-2018-10242 CVE-2018-10243 Multiple vulnerabilities have been found in suricata, the network threat detection engine: CVE-2018-10242 Missing length check causing out-of-bounds read in SSHParseBanner app-layer-ssh.c. Remote attackers might...

Joomla FSF FreeStyle FAQs 1.11.18 Database Disclosure / SQL Injection

Exploit Title : Joomla FSF FreeStyle FAQs Components 1.11.18 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 03/02/2019 Vendor Homepage : freestyle-joomla.com Software Download Link :...

[SECURITY] [DLA 1590-1] openjdk-7 security update

Package : openjdk-7 Version : 7u181-2.6.14-2deb8u1 CVE ID : CVE-2018-2952 CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-3214 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service,...

[SECURITY] [DLA 1577-1] xen security update

Package : xen Version : 4.4.4lts4-0+deb8u1 CVE ID : CVE-2018-7540 CVE-2018-7541 CVE-2018-8897 CVE-2018-12891 CVE-2018-12893 CVE-2018-15469 CVE-2018-15470 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege...

[SECURITY] [DLA 1559-1] xen security update

Package : xen Version : 4.4.4lts3-0+deb8u1 CVE ID : CVE-2017-15592 CVE-2017-15593 CVE-2017-15594 CVE-2017-15595 CVE-2017-17044 CVE-2017-17045 CVE-2018-10472 CVE-2018-10981 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations...

CVE-2014-6046

Multiple cross-site request forgery CSRF vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that 1 delete active users by leveraging improper validation of CSRF tokens or that 2 delete open questions, 3 activate users, 4...

CVE-2014-6046

Multiple cross-site request forgery CSRF vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that 1 delete active users by leveraging improper validation of CSRF tokens or that 2 delete open questions, 3 activate users, 4...

VK.com: Доступ к администраторским faq

Просмотр некоторых закрытых статей FAQ. Уязвимость позволяла получить доступ к талмудам vk.com/tlmdXXX в которых хранится информация для администраторов и модераторов социальной сети ВКонтакте... Получение доступа к адм. информации... @ 500$...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0150

An update of 'gcc', 'nghttp2' packages of Photon OS has been released...

Description of the security update for the HIDParser elevation of privilege vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: June 12, 2018

Description of the security update for the HIDParser elevation of privilege vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: June 12, 2018 Summary To learn more about the vulnerability, go to CVE-2018-8169.Important If you install a languag...

Easy Support Tools 1.0 SQL Injection

Exploit Title: Easy Support Tools - FAQs, Help Articles, Blog and Feedback Script v1.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy: https://codecanyon.net/item/easy-support-tools-faqs-help-articles-blog-and-feedback/17864522 Demo:...

DLA-658-1 icedove - security update

Bulletin has no description...

mobilegamefaqs.com XSS vulnerability

Vulnerable URL: http://www.mobilegamefaqs.com/multisearch.php?word=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 964282 Google...

bluebird.com XSS vulnerability

Vulnerable URL: https://www.bluebird.com/faqs/"';--?linknav=us-Prepaid-Bluebird-Home-FDIC Details: Description| Value ---|--- Patched:| Yes, at 20.12.2015 Latest check for patch:| 20.12.2015 01:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14051 Google...

panasonic.com XSS vulnerability

Vulnerable URL: http://www.panasonic.com/business/iframes/toughbook-faqs.asp?f=73"alert/XSSPOSED/...

IndiaNIC FAQs Manager 1.0 - Ask Question Form question Parameter XSS

The faqs-manager WordPress plugin was affected by an Ask Question Form question Parameter XSS security vulnerability...

IndiaNIC FAQs Manager 1.0 - CAPTCHA Value Disclosure

The faqs-manager WordPress plugin was affected by a CAPTCHA Value Disclosure security vulnerability...

IndiaNIC FAQs Manager 1.0 - Blind SQL Injection

The faqs-manager WordPress plugin was affected by a Blind SQL Injection security vulnerability...