Lucene search
K

3943 matches found

Prion
Prion
added 2018/05/10 3:29 a.m.16 views

Sql injection

modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute a SQL Injection through function calls in the code parameter...

7.5CVSS9.8AI score0.01412EPSS
Exploits1References1Affected Software2
CVE
CVE
added 2018/05/10 3:0 a.m.58 views

CVE-2018-8824

The vulnerability CVE-2018-8824 affects the PrestaShop Responsive Mega Menu Pro module version 1.0.32 (for PrestaShop 1.5.5.0–1.7.2.5). The issue is a SQL injection in modules/bamegamenu/ajax_phpcode.php exposed via the code parameter, reported across multiple sources (NVD, CNVD, OSV, OpenVAS) as...

9.8CVSS9.9AI score0.01412EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2018/04/27 12:0 a.m.2 views

GeniXCMS Cross-Site Scripting Vulnerability (CNVD-2018-08912)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 1.1.0. A remote attacker can...

4.8CVSS5.9AI score0.00653EPSS
Exploits1References1
Prion
Prion
added 2018/04/26 2:29 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...

3.5CVSS4.7AI score0.00653EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/04/26 2:29 p.m.22 views

CVE-2017-14740

Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...

4.8CVSS5.6AI score
Exploits0References1
NVD
NVD
added 2018/04/26 2:29 p.m.20 views

CVE-2017-14740

Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...

4.8CVSS4.7AI score0.00653EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/04/26 2:0 p.m.25 views

CVE-2017-14740

Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...

4.7AI score0.00653EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2018/04/26 12:0 a.m.47 views

SUSE SLED12 / SLES12 Security Update : Recommended update for LibreOffice (SUSE-SU-2018:1076-1)

LibreOffice was updated to version 6.0.3. Following new features were added : - The Notebookbar, although still an experimental feature, has been enriched with two new variants: Grouped Bar Full for Writer, Calc and Impress, and Tabbed Compact for Writer. The Special Characters dialog has been...

9.8CVSS6.9AI score0.23988EPSS
Exploits5References18
Citrix
Citrix
added 2018/04/23 12:0 a.m.6 views

The Recent Apps in the Start Menu are Not Displayed by the Citrix Receiver

The recent apps in the start menu are not displayed by the Citrix Receiver. Only the recent apps from a local app or shortcuts from GPO’s are shown. The registry key values are saved but are not displayed. If the users have icons in the start menu from a second worker group, the keys are created ...

6.9AI score
Exploits0
OSV
OSV
added 2018/04/21 9:29 p.m.13 views

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

5.4CVSS5.4AI score
Exploits0References2
NVD
NVD
added 2018/04/21 9:29 p.m.14 views

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

5.4CVSS5.3AI score0.00697EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/04/21 9:0 p.m.19 views

CVE-2017-15640

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...

5.3AI score0.00697EPSS
Exploits0References2
CNVD
CNVD
added 2018/04/19 12:0 a.m.3 views

London Trust Media Private Internet Access VPN Client for Windows Elevation of Privilege Vulnerability

London Trust Media Private Internet Access PIA VPN Client for Windows is a Windows-based VPN client for anonymous Internet access. A security vulnerability exists in version 77 of the London Trust Media PIA VPN Client for Windows based platforms, which stems from the program's failure to adequate...

7.8CVSS7AI score0.00346EPSS
Exploits0References1
OSV
OSV
added 2018/04/18 3:45 p.m.3 views

DRUPAL-CONTRIB-2018-018

This module helps in exporting and importing Menu Items via the administrative interface. The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links. There is no mitigation for this vulnerability...

6.8AI score
Exploits0References1
Drupal
Drupal
added 2018/04/18 12:0 a.m.19 views

Menu Import and Export - Critical - Access bypass - SA-CONTRIB-2018-018

This module helps in exporting and importing Menu Items via the administrative interface. The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links. There is no mitigation for this vulnerability...

6.6AI score
Exploits0References6
0day.today
0day.today
added 2018/04/17 12:0 a.m.166 views

Microsoft Window Manager (Windows 7 x86) - Menu Management Component UAF Privilege Elevation Exploit

Exploit for windows platform in category local exploits include include include include pragma commentlib, "psapi.lib" define POCDEBUG 0 if POCDEBUG == 1 define POCDEBUGBREAK getchar elif POCDEBUG == 2 define POCDEBUGBREAK DebugBreak else define POCDEBUGBREAK endif static PVOIDfastcall...

7.2CVSS0.2AI score0.10034EPSS
Exploits4
CNVD
CNVD
added 2018/03/30 12:0 a.m.7 views

PrestaShop Responsive Mega Menu Pro Module Code Execution Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. The solution provides a variety of payment methods , short message alerts and product image zoom and other features.Responsive Mega Menu Horizontal + Vertical + Dropdown Pro module is used in which a responsive menu module . A...

9.8CVSS7.7AI score0.51572EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2018/03/28 2:29 a.m.4 views

CVE-2018-8823

modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter...

9.8CVSS6.1AI score0.51572EPSS
Exploits1References3
exploitpack
exploitpack
added 2018/03/26 12:0 a.m.12 views

Microsoft Windows Manager (7 x86) - Menu Management Component UAF Privilege Elevation

Microsoft Windows Manager 7 x86 - Menu Management Component UAF Privilege Elevation...

3.5AI score
Exploits0
Exploit DB
Exploit DB
added 2018/03/26 12:0 a.m.122 views

Microsoft Windows Manager (7 x86) - Menu Management Component UAF Privilege Elevation

include include include include pragma commentlib, "psapi.lib" define POCDEBUG 0 if POCDEBUG == 1 define POCDEBUGBREAK getchar elif POCDEBUG == 2 define POCDEBUGBREAK DebugBreak else define POCDEBUGBREAK endif static PVOIDfastcall pfnHMValidateHandleHANDLE, BYTE = NULL; static constexpr UINT...

7.8CVSS7.8AI score0.10034EPSS
Exploits4
Rows per page
Query Builder