342 matches found
Trump Campaign Website Left Open to Email Server Hijack
A mistake made by website developers left an official re-election website for President Donald Trump open to attack. The error, impacting hundreds of other websites as well, is tied to a website development tool called Laravel, used to test sites before they go live. The tool, accidentally left...
Schben Adive Cross-Site Request Forgery Vulnerability
Schben Adive is a PHP-based web development framework . A cross-site request forgery vulnerability exists in the Internal/Views/config.php file in Schben Adive version 2.0.7, which stems from a WEB application that does not adequately validate whether a request is coming from a trusted user, and...
File Upload Vulnerability in YFCMF Fi***.p*** Page
YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the YFCMF Fi.p page, which can be exploited by an attacker to gain server privileges...
WorkSuite PRM 2.4 SQL Injection
=========================================================================================== Exploit Title: WorkSuite PRM 2.4 - 'password' SQL Inj. Dork: N/A Date: 01-05-2019 Exploit Author: Mehmet Emiroglu Vendor Homepage: https://codecanyon.net/item/worksuite-project-management-system/20052522...
File upload vulnerability in vaeThink
vaeThink is a lightweight, high speed PHP content management framework built on Layui and tp5. A file upload vulnerability exists in vaeThink, which can be exploited by attackers to gain server privileges...
Debian DSA-4441-1 : symfony - security update
Multiple vulnerabilities were discovered in the Symfony PHP framework which could lead to cache bypass, authentication bypass, information disclosure, open redirect, cross-site request forgery, deletion of arbitrary files, or arbitrary code execution. C Tenable Network Security, Inc. The...
Debian: Security Advisory (DSA-4441-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-symfony FEDORA-2018-b38a4dd0c7
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for php-symfony FEDORA-2019-3ee6a7adf2
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 29 Update: php-symfony4-4.1.12-1.fc29
Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...
[SECURITY] Fedora 28 Update: php-symfony-2.8.51-1.fc28
PHP framework for web projects...
[SECURITY] Fedora 30 Update: php-symfony-2.8.51-1.fc30
PHP framework for web projects...
Ispirithalaya Hospital Management System 0.1.2 Database Configuration Disclosure
Exploit Title : Ispirithalaya Hospital Management System 0.1.2 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : freeehospital.com Software Download Link :...
DSShop open source single store mall system V1.5 there are arbitrary file deletion vulnerability
DSShop is based on ThinkPHP5 framework for the development of a single store mall system, full support for PC, WAP, microblogging and other terminal equipment, designed for business users to adapt to the entire business model of the solution, can fully meet the operational needs. DSShop open sour...
[SECURITY] Fedora 29 Update: php-symfony3-3.4.20-1.fc29
Symfony PHP framework version 3. NOTE: Does not require PHPUnit bridge...
[SECURITY] Fedora 28 Update: php-symfony-2.8.49-1.fc28
PHP framework for web projects...
WordPress Configuration Cheat Sheet
In our series about misconfigurations of PHP frameworks, we have investigated Symfony, a very versatile and modular framework. Due to the enormous distribution and the multitude of plugins, WordPress is also a very popular target for attackers. This cheat sheet focuses on the wp-config.php file a...
[SECURITY] Fedora 28 Update: php-symfony4-4.0.14-1.fc28
Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...