2387 matches found
Superfood 1.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Superfood - Restaurants & Online Food Order System 1.0 - Persistent cross site scripting / Cross site request forgery / Admin panel Authentication bypass Date: 2018-05-20 Exploit Author: Borna nematzadeh L0RD or email protected...
Superfood 1.0 - Multiple Vulnerabilities
Exploit Title: Superfood - Restaurants & Online Food Order System 1.0 - Persistent cross site scripting / Cross site request forgery / Admin panel Authentication bypass Date: 2018-05-20 Exploit Author: Borna nematzadeh L0RD or [email protected] Vendor Homepage:...
Yokogawa CENTUM and Exaopc
1. EXECUTIVE SUMMARY CVSS v3 6.5 Vendor : Yokogawa Equipment : CENTUM series and Exaopc Vulnerability : Permissions, Privileges, and Access Controls 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to generate false system or process alarms, or block...
Friday Squid Blogging: Giant Squid Stealing Food from Each Other
An interesting hunting strategy: Off of northern Spain, giant squid often feed on schools of fish called blue whiting. The schools swim 400 meters or less below the surface, while the squid prefer to hang out around a mile deep. The squid must ascend to hunt, probably seizing fish from below with...
Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
pittsburghfoodpolicy.org XSS vulnerability
Open Bug Bounty ID: OBB-565539 Description| Value ---|--- Affected Website:| pittsburghfoodpolicy.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bird-food.ca XSS vulnerability
Open Bug Bounty ID: OBB-523736 Description| Value ---|--- Affected Website:| bird-food.ca Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...
Friday Squid Blogging: Japanese "Dude Food" Includes Squid
This seems to be a trend. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Facial Recognition Is Coming to Retail
Summary article...
FS Grubhub Clone SQL Injection Vulnerability
FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
PHP Scripts Mall Food Order Script SQL Injection Vulnerability
PHP Scripts Mall Food Order Script is a set of PHP based online review and feedback scripts for hotels, restaurants by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Food Order Script version 1.0. A remote attacker can exploit this vulnerability by sending the...
CVE-2017-17614
Food Order Script 1.0 has SQL Injection via the /list city parameter...
CVE-2017-17614
Food Order Script 1.0 has SQL Injection via the /list city parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
Sql injection
Food Order Script 1.0 has SQL Injection via the /list city parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
Sql injection
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17571
FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17614
CVE-2017-17614 refers to a SQL Injection in Food Order Script 1.0, exploitable via the /list city parameter. Multiple sources (CNVD, CVE records, CIRCL) confirm the injection and public exploits exist (e.g., Exploit-DB). CVSS metrics indicate a high/critical impact with network access and no auth...
