CVE-2017-8143

CVE-2017-8143 concerns a Denial of Service in the Wi‑Fi driver of Huawei smartphones (Honor 5C and P9 Lite) with affected builds prior to certain firmware versions. The vulnerability allows an attacker to entice a user to install a malicious app, which can trigger a crash by accessing an invalid ...

CVE-2017-8206

CVE-2017-8206 concerns Huawei/Honor 7 Lite devices. The vulnerability is described as an App Lock bypass in the Phone Manager’s App Lock feature for software versions earlier than NEM-L21C432B352, enabling an attacker to temporarily access apps on a target device. Affected product: HONOR 7 Lite (...

CVE-2017-8206

HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily...

CVE-2017-8144: Improper Restriction of Power Consumption

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions...

CVE-2017-8206: Undefined Security Weakness

HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily...

PT-2017-18153

Name of the Vulnerable Software and Affected Versions Honor 5A versions before CAM-L03C605B143CUSTC605D003 Honor 8 Lite versions before Prague-L03C605B161 Honor 8 Lite versions before Prague-L23C605B160 Mate9 versions before MHA-AL00C00B225 Mate9 versions before LON-AL00C00B225 P10 versions befor...

CVE-2017-8143: Improper Input Validation

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of...

PT-2017-18152

Name of the Vulnerable Software and Affected Versions Honor 5C versions prior to NEM-L21C432B351 Honor P9 Lite versions prior to VNS-L21C10B381 Description The Wi-Fi driver in certain Huawei smart phones has a denial-of-service issue. An attacker could potentially trick a user into installing a...

PT-2017-18210

Name of the Vulnerable Software and Affected Versions HONOR 7 Lite mobile phones versions prior to NEM-L21C432B352 Description The issue allows an attacker to bypass the App Lock on a target mobile phone temporarily by performing specific operations, potentially allowing unauthorized access to...

WordPress Ultimate Form Builder Lite Plugin < 1.3.7 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:accesspressthemes:ultimate-form-builder-lite"; if descriptio...

CMS Lite 1.4 SQL Injection

Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/ Version: 1.4 Category: Webapps Tested o...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

Sql injection

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CVE-2017-15984

CMS Lite 1.4 is affected by a SQL injection in index.php via the S parameter. The vulnerability arises from injectable SQL commands in the S query string, enabling an attacker to execute arbitrary SQL. Public PoCs and exploits exist (e.g., Exploit-DB, packetstorm) demonstrating the issue. The CVS...

CVE-2017-15984: Improper Neutralization of Special Elements used in an SQL Command

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

PT-2017-14339

Name of the Vulnerable Software and Affected Versions Creative Management System CMS Lite version 1.4 Description The issue allows SQL Injection via the S parameter to the "index.php" endpoint. Recommendations For Creative Management System CMS Lite version 1.4, consider restricting access to the...

CmsLite 1.4 - S SQL Injection

CmsLite 1.4 - S SQL Injection Exploit Title: Creative Management System - CMS Lite 1.4 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://bekirk.co.uk/ Software Link: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://demo.bekirk.co.uk/ Version:...

CVE-2017-15919

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

CVE-2017-15919

The ultimate-form-builder-lite plugin for WordPress (versions prior to 1.3.7 ) is vulnerable to SQL Injection via the wp-admin/admin-ajax.php file. This flaw allows a remote, authenticated attacker to inject PHP objects, which can result in PHP Object Injection and potentially lead to arbitrary c...