3344 matches found
Event Manager Admin panel - events_new.php SQL injection
Event Manager Admin panel - eventsnew.php SQL injection Exploit Title: Event Manager PHP Script Admin panel - 'eventsnew.php' SQL injection Date: 2018-06-10 Exploit Author: telahdihapus Vendor Homepage: https://codecanyon.net/user/ezcode Software Link:...
Event Manager Admin Panel events_new.php SQL Injection
Exploit Title: Event Manager PHP Script Admin panel - 'eventsnew.php' SQL injection Date: 2018-06-10 Exploit Author: telahdihapus Vendor Homepage: https://codecanyon.net/user/ezcode Software Link: https://codecanyon.net/item/eventmanager-php-script-admin-panel/21280741 Tested on: windows 10 1...
WordPress Eu Cookie Notice plugin <= 1.0.6 - Cross-site request forgery (CSRF) vulnerability
Cross-site request forgery CSRF vulnerability found by ThreatPress Research Team in WordPress Eu Cookie Notice plugin versions = 1.0.7. Solution Update the WordPress Eu Cookie Notice plugin to the latest available version at least 1.0.7...
Z-BlogPHP Cross-Site Scripting Vulnerability (CNVD-2018-09795)
Z-BlogPHP is an open source PHP-based blogging system developed by the Z-Blog community. A cross-site scripting vulnerability exists in Z-BlogPHP version 2.0.0. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML via the 'copyright notice' field...
ARM mbed TLS integer overflow vulnerability
ARM mbed TLS is a product that provides secure communication and encryption capabilities for mbed products. An integer overflow vulnerability exists in ARM mbed TLS. Due to a failure in the sslparseclientpskidentity function, the affected software fails to properly perform boundary checks. An...
User Profile Management: Default Exclusion List not working. Error: "HDX policy DefaultSyncExclusionListDir disabled. Using an empty list"
If you enable "Enable Default Exclusion List - directories " policy from Citrix Studio, it might not work as expected. Following entry isrecorded in User Profile Management UPM logs: 2018-03-16;19:09:25.611;INFORMATION;;;;1756;ReadPolicy: HDX policy DefaultSyncExclusionListDir disabled. Using an...
finecutent.com XSS vulnerability
Open Bug Bounty ID: OBB-567459 Description| Value ---|--- Affected Website:| finecutent.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ZH Yandex Map, 6.2.1.0, SQL Injection
ZH Yandex Map from zhuk.cc, versions 6.2.1.0 and previous, SQL Injection Resolution: update to version 6.3.1.0 Update notice: http://zhuk.cc/2018/02/21/zh-yandexmap-security-update-2/...
(RHSA-2018:0239) Low: Red Hat Enterprise Linux 6.2 AMC Retirement Notice
In accordance with the Red Hat Enterprise Linux Errata Support Policy, Advanced Mission Critical for Red Hat Enterprise Linux 6.2 was retired as of January 29, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...
wintero.escoremx.com XSS vulnerability
Open Bug Bounty ID: OBB-548435 Description| Value ---|--- Affected Website:| wintero.escoremx.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
GitStack Server User Add Vulnerability
GitStack is a Windows-based version control system. A security vulnerability exists in GitStack 2.3.10 and earlier versions, which stems from the program's failure to adequately filter user input. The vulnerability can be exploited to add a user to the server by sending the username and password...
CISCO-SA-20170629-SNMP
creationtimestamp| type| source ---|---|--- 2018-01-07 23:54:01+00:00| published-proof-of-concept| https://t.me/canyoupwnme/2981...
Huawei UPnP DeviceUpgrade command injection
Added: 01/02/2018 BID: 102344 Background Huawei home routers support the DeviceUpgrade service type over the Universal Plug and Play UPnP protocol to facilitate upgrading of firmware. Problem A remote authenticated attacker can execute arbitrary commands injected into the NewStatusURL XML element...
hskimchi.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-428982 Description| Value ---|--- Affected Website:| hskimchi.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Threat Outbreak Alert RuleID31362: Email Messages Distributing Malicious Software on November 20, 2017
Medium Alert ID: 55984 First Published: 2017 November 20 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31362 may contain the following files: Name |...
Threat Outbreak Alert RuleID31353: Email Messages Distributing Malicious Software on November 20, 2017
Medium Alert ID: 55978 First Published: 2017 November 20 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31353 may contain the following files: Name |...
Identity Governance 12.6 Cross Site Scripting Vulnerability
Exploit for windows platform in category web applications Security Notice for CA Identity Governance CA Technologies support is alerting customers to a potential risk with CA Identity Governance. A vulnerability exists that can potentially allow a malicious actor to conduct cross-site scripting...
Drupal End of Life (EOL) Detection - Windows
The Drupal version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Threat Outbreak Alert RuleID30792: Email Messages Distributing Malicious Software on September 28, 2017
Medium Alert ID: 55413 First Published: 2017 September 28 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30792 may contain the following files: Name ...