5957 matches found
WordPress Smart Google Code Inserter Plugin < 3.5 - Authentication Bypass / SQL Injection
Exploit for php platform in category web applications Exploit Title: Smart Google Code Inserter 3.5 - Auth Bypass/SQLi Google Dork: inurl:wp-content/plugins/smart-google-code-inserter/ Date: 26-Nov-17 Exploit Author: Benjamin Lim Vendor Homepage: http://oturia.com/ Software Link:...
[SECURITY] Fedora 27 Update: kernel-4.14.8-300.fc27
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.14.8-200.fc26
The kernel meta package...
[SECURITY] Fedora 27 Update: kernel-4.14.7-300.fc27
The kernel meta package...
Design/Logic Flaw
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...
CVE-2017-5255
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...
CVE-2017-5255
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user including the otherwise low-privilege readonly user to inject shell meta-characters as part of a specially-crafted POST request...
PT-2017-16423
Name of the Vulnerable Software and Affected Versions Cambium Networks ePMP firmware versions prior to 3.5 Description The issue is related to a lack of input sanitation for certain parameters on the web management console. This allows any authenticated user, including low-privilege readonly user...
[SECURITY] Fedora 26 Update: kernel-4.14.6-200.fc26
The kernel meta package...
[SECURITY] Fedora 27 Update: kernel-4.14.6-300.fc27
The kernel meta package...
Tidy prvTidyTidyMetaCharset Function Denial of Service Vulnerability
Tidy is the United States of America's World Wide Web Consortium W3C researcher Dave Raggett developed a used to correct and clean up the HTML file errors and neatly arrange the code i.e., indentation of the software and function libraries. A denial of service vulnerability exists in the...
DEBIAN-CVE-2017-17497
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service Segmentation Fault, because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value...
[SECURITY] Fedora 25 Update: kernel-4.13.16-100.fc25
The kernel meta package...
WordPress Emag Marketplace Connector Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Emag Marketplace Connector plugin is used in which a can be WooCommerec store and the The eMAG Marketplace...
CVE-2017-17043
The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly...
PT-2017-14679
Name of the Vulnerable Software and Affected Versions Emag Marketplace Connector plugin version 1.0.0 Description The issue is related to reflected XSS. The parameter post to the API endpoint "/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php" is not filtered...
[SECURITY] Fedora 27 Update: git-2.14.3-2.fc27
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
[SECURITY] Fedora 25 Update: kernel-4.13.13-100.fc25
The kernel meta package...
WordPress: Arbitrary file deletion in wp-core - guides towards RCE and information disclosure
Vulnerable place 1: wp-admin/post.php $newmeta'thumb' is placed into DB not sanitized directly from user input. case 'editattachment': checkadminreferer'update-post' . $postid; // Don't let these be changed unset$POST'guid'; $POST'posttype' = 'attachment'; // Update the thumbnail filename $newmet...