CVE-2014-8621

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

CVE-2014-8621

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

CVE-2014-8621

The CVE-2014-8621 issue affects the WordPress Store Locator plugin versions 2.3–3.11, where an SQL injection vulnerability exists in the sl-xml.php endpoint via the sl_custom_field parameter. The underlying flaw allows remote attackers to execute arbitrary SQL commands, as indicated by multiple s...

PT-2017-6247

Name of the Vulnerable Software and Affected Versions Store Locator plugin versions 2.3 through 3.11 for WordPress Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sl custom field parameter to the "sl-xml.php" endpoint. Recommendations For...

CVE-2014-8621: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

Mozilla Firefox URL Loading Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in WebExtensions in versions of Mozilla Firefox prior to 56. A remote attacker can exploit the vulnerability to load about:URL...

CVE-2017-12236

Cisco IOS XE LISP Authentication Bypass (CVE-2017-12236) affects IOS XE 3.2–16.5 when acting as an IPv4/IPv6 map server. A logic regression allows an unauthenticated attacker to bypass EID→RLOC registration checks by sending crafted map-registration requests, potentially injecting invalid EID map...

Cisco IOS XE Software Authentication Bypass Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE. A remote attacker could exploit this vulnerability to bypass authenticatio...

Ctek SkyRouter Authentication Bypass Vulnerability

SkyRouter is a product from CTEK Sweden for managing wireless IP connections. An authentication bypass vulnerability exists in Ctek SkyRouter, which can be exploited by an attacker to bypass authentication restrictions and gain access to an application by accessing a specific Uniform Resource...

libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2017:2789 An update for samba is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Buffer overflow

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

CVE-2017-8259

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

CVE-2017-8259

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

CVE-2017-8259: Buffer Copy without Checking Size of Input

In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer...

URL globbing out of bounds read

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a...

Authentication flaw

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...

jackssmallengines.com XSS vulnerability

Vulnerable URL: https://www.jackssmallengines.com/jacks-parts-lookup/toro-model-locator.aspx/"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS...

rolex.com XSS vulnerability

Vulnerable URL: https://www.rolex.com/ja/rolex-dealers/services-locator/japan=x/...

heronfoods.com XSS vulnerability

Vulnerable URL: http://www.heronfoods.com/site/storelocator?s=1=15page=8=0=M=UK="--!"wrapper-map-canvas Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1210686 VIP website status:| ...

Joomla Google Map Store Locator 4.4 SQL Injection

Exploit Title: Joomla! Component Google Map Store Locator v4.4 - SQL Injection Google Dork: inurl:index.php?option=comgooglemaplocator Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/google-map-store-locator/live-demo Demo:...