WordPress Ultimate Member 1.3.64 Local File Inclusion

------------------------------------------------------------------------ Ultimate Member Local File Inclusion vulnerability ------------------------------------------------------------------------ Burak Kelebek, July 2016 ------------------------------------------------------------------------...

WordPress Ultimate Member Plugin <= 1.3.64 - Local File Inclusion

This plugin is prone to a PHP file inclusion vulnerability. Solution Update the plugin...

DEBIAN-CVE-2016-5244

The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message...

MetInfo 5.3.4 /member/login.php SQL注入

No description provided by source...

UBUNTU-CVE-2016-5244

The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message...

RTMPDump librtmp Remote Code Execution Vulnerability

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. RTMPDump version 2.4 has a security vulnerability in the 'AMF3CDAddProp' function in the amf.c file in librtmp...

HDCMS内容管理系统 spacecontroller.class.php 参数username SQL注入漏洞

0x01漏洞简介 HDCMS内容管理系统在文件spacecontroller.class.php处的参数username存在SQL注入漏洞。 0x02漏洞详情 member/controller/spacecontroller.class.php public function init //用户名 if $username = Q'username' $uid = M'user'-where"username='$username'"-getField'uid'; goU"index", array'uid' = $uid; $this-uid = Q'uid', 0, 'intval...

SUSE-RU-2016:1479-1 Recommended update for samba

This update for Samba provides the following fixes: - Fix libads' record session expiry for spnego sasl binds. bsc979268 - Fix NTSTATUSACCESSDENIED when accessing windows public share. - Only validate MIC if 'map to guest' is not being used. - NetAPP SMB servers don't negotiate NTLMSSPSIGN...

SUSE-RU-2016:1478-1 Recommended update for samba

This update for Samba provides the following fixes: - Fix libads' record session expiry for spnego sasl binds. bsc979268 - Fix NTSTATUSACCESSDENIED when accessing windows public share. - Only validate MIC if 'map to guest' is not being used. - NetAPP SMB servers don't negotiate NTLMSSPSIGN...

DedeCMS /member/buy_action.php SQL注入漏洞

No description provided by source...

DedeCMS /member/reg_new.php SQL注入漏洞

No description provided by source...

XDCMS system\modules\member\index.php SQL注入漏洞

No description provided by source...

Veris: [Stored XSS] sandbox.veris.in

Hello I want to report you another xss... but it's stored Steps to reproduce it : 1 . First create a group . 2. Go to https://sandbox.veris.in/portal/members/ and add a member with name " . 3. Add this member in a group created in step 1 .. . 4. Go to https://sandbox.veris.in/portal/assets/ and...

hd.stheadline.com XSS vulnerability

Vulnerable URL: http://hd.stheadline.com/member/login/?b=%3C/title%3E%3C/script/%27-alert%280%29-%27%22-%22--%3E%3Cimg/onerror=%22;alert%28/OPENBUGBOUNTY/%29;%22src=1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

Veris: Stored XSS in member book

This issue is related to XSS vulnerability in Datatables...

Ultimate Member < 1.3.40 - Cross-Site Scripting (XSS)

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

HackerOne: External programs revealing info

A bug in an authorization check was found by @1337coder on an endpoint that was showing the members of a team, as well as the team member groups that were set up. Example output: "id":1, "username":"dirk", "name":"dirk", "bio":"", "url":"https://hackerone.com/dirk" , "id":2, "name":"Admin",...

PT-2016-4443

Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 before patch 24 EMC Documentum xCP versions 2.2 before patch 12 Description The issue allows remote authenticated users to obtain sensitive user-account metadata. This is achieved via a "members/xcp member" API...

Veris: Critical - Insecure Direct Object Reference - Deleting any member of any organization remotely

Hello Team, I have found an extremely critical issue with the help of which an attacker can delete any member of any organization. The vulnerability is Insecure Direct Object ReferenceIDOR which leads to privilege escalation as an attacker can perform such a critical attack from his own account...

we7cms redirection vulnerability

we7cms is a content management system based on asp.net development. A redirection vulnerability exists in the member center login page /user/login.aspx of we7cms, which allows an attacker to use this vulnerability to lure users to a malicious page via the returnURL parameter to launch a phishing...