CVE-2019-8360

CVE-2019-8360 affects Themerig Find a Place CMS Directory 1.5. The connected sources describe an SQL injection vulnerability in the file path find/assets/external/data_2.php through the cate parameter. Root cause per CNVD: lack of validation of externally entered SQL statements in database-based ...

Find A Place CMS Directory 1.5 SQL Injection

Exploit Title: Find a Place CMS Directory 1.5 - 'assets/external/data2.php cate' SQL Injection Google Dork: inurl:"assets/external/data.php" Date: 14 Feb 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: https://themerig.com/...

CVE-2019-8360: Improper Neutralization of Special Elements used in an SQL Command

Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data2.php cate parameter...

bypass-firewalls-by-DNS-history - Firewall Bypass Script Based On DNS History Records

This script will try to find: the direct IP address of a server behind a firewall like Cloudflare, Incapsula, SUCURI ... an old server which still running the same inactive and unmaintained website, not receiving active traffic because the A DNS record is not pointing towards it. Because it's an...

PT-2018-13967

Name of the Vulnerable Software and Affected Versions Elasticsearch Security versions 6.5.0 and 6.5.1 Description The issue is related to an XXE flaw in Machine Learning's find file structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager...

Stack overflow

An error within the "findgreen" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code...

PT-2018-2932

Name of the Vulnerable Software and Affected Versions libirman-dev affected versions not specified Description The issue is related to a buffer overflow error in the ppdcSource::find variable function of the workmanir utility in the libirman-dev package. This could potentially allow an attacker t...

PT-2018-2934

Name of the Vulnerable Software and Affected Versions mesa-utils affected versions not specified Description The issue is related to a buffer overflow error in the ppdcSource::find variable function, located in the /usr/lib/x86 64-linux-gnu/libcupsppdc.so.1 library, which is part of the mesa-util...

DEBIAN-CVE-2018-19655

A stack-based buffer overflow in the findgreen function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file...

Netwide Assembler Null Pointer Dereference Vulnerability (CNVD-2019-05119)

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A null pointer dereference vulnerability exists in the 'findlabel' function of the asm/labels.c file in NASM version 2.14rc15, which can be exploited by an attacker to cause a denial of service null...

UBUNTU-CVE-2018-19209

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

Reconnaissance Swiss Army Knife: ReconDog

Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys : Uses censys.io to gather massive amount of information about an IP address. NS Lookup : Does na...

Huawei Mate 10 Pro phone FRP bypass vulnerability

Huawei Mate 10 Pro is a smartphone product of Chinese company Huawei Huawei. The Huawei Mate 10 Pro phone suffers from an FRP bypass vulnerability, which allows an attacker to bypass the "Find My Phone" protection after a series of voice and keypad actions during a phone reset. Successful...

CVE-2018-7990

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326C00 have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FR...

CVE-2018-7990

CVE-2018-7990 affects Huawei Mate 10 Pro smartphones running versions before 8.1.0.326(C00). The vulnerability enables an FRP bypass during the phone reset process, where an attacker could bypass the Find My Phone protection after a sequence of voice and keyboard actions. This is tied to Huawei’s...

CVE-2018-7990: Undefined Security Weakness

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326C00 have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FR...

aspirecoffeeworks.com XSS vulnerability

Open Bug Bounty ID: OBB-671769 Description| Value ---|--- Affected Website:| aspirecoffeeworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

find-container.ru XSS vulnerability

Open Bug Bounty ID: OBB-671173 Description| Value ---|--- Affected Website:| find-container.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-3880

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles existing records inside its SQLite database,...

CVE-2018-3880: Out-of-bounds Write

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles existing records inside its SQLite database,...