CVE-2019-15560

The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js...

CVE-2019-15132

Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses e.g., the "Login name or password is incorrect" and "No permissions for system access" messages, or just blocking for a number of...

PrestaShop cross-site scripting vulnerability (CNVD-2019-16479)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the 'shopcountry' parameter of the...

CVE-2018-8099

Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file...

PT-2019-6068 · Wayang · Wayang-Cms

Name of the Vulnerable Software and Affected Versions: Wayang-CMS version 1.0 Description: A cross-site scripting XSS issue in the index.php file of Wayang-CMS allows attackers to execute arbitrary web scripts or HTML by adding a specially crafted X-Forwarded-For field to the header. This can...

PHP-Proxy Cross-Site Scripting Vulnerability

PHP-Proxy is a web-based proxy script featuring fast, easy customization and the ability to provide support for complex websites such as YouTube and Facebook. A cross-site scripting vulnerability exists in PHP-Proxy versions 5.1.0 and earlier, which can be exploited by an attacker via a URL field...

PhpTpoint Pharmacy Management System SQL Injection Vulnerability

PhpTpoint Pharmacy Management System is a pharmacy management system developed using the PHP language. A SQL injection vulnerability exists in the 'username' parameter of the index.php file in PhpTpoint Pharmacy Management System, which can be exploited by a remote attacker to bypass the login pa...

CVE-2018-18874

nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=filemanagerupload URI...

ASUSTOR NAS ADM Login Bypass Vulnerability

ASUSTOR Data Master ADM is a dedicated operating system for ASUSTOR NAS with a tablet-like graphical interface comparable to a zero learning curve. A login bypass vulnerability exists in ASUSTOR NAS ADM. The vulnerability exists in the web interface of the ASUSTOR NAS, where /initial/index.cgi is...

CVE-2018-17046

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

UCMS PHP Code Injection Vulnerability

UCMS is a content management system written in PHP. A security vulnerability exists in the install/index.php file in UCMS version 1.4.6. The vulnerability can be exploited to inject and execute PHP code with the help of the 'systemdomain' parameter...

Dirhunt - Find Web Directories Without Bruteforce

Dirhunt is a web crawler optimize for search and analyze directories. This tool can find interesting things if the server has the "index of" mode enabled. Dirhunt is also useful if the directory listing is not enabled. It detects directories with false 404 errors , directories where an empty inde...

phpIPAM cross-site scripting vulnerability (CNVD-2018-08575)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in the app/tools/mac-lookup/index.php file in phpIPAM version 1.3.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...

XIUNOBBS V4.0.4 suffers from a logic flaw vulnerability

Xiuno BBS is an open source lightweight forum system. A logic flaw vulnerability exists in XIUNOBBS V4.0.4 install/index.php. An attacker can exploit this vulnerability to cause a system reinstallation...

CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

DEBIAN-CVE-2018-8099

Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file...

UBUNTU-CVE-2018-8099

Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file...

UBUNTU-CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...

CVE-2018-8098

Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...