GE Multilin SR Relay Unauthorized Access Vulnerability

The 750 Feeder/760 Feeder/469 Motor/489 Generator/745 Transformer/369 Motor are all a GE relay. An unauthorized access vulnerability exists in the GE Multilin SR relays, which could allow an attacker to gain unauthorized access to the GE MultilinSR series of relay products by brute-force cracking...

Apple iOS 10.3 - Control Panel Denial of Service Vulnerability

Document Title: =============== Apple iOS 10.3 - Control Panel Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2059 Video: https://www.youtube.com/watch?v=MSscCLATxPQ Release Date: ============= 2017-04-27 Vulnerability Laboratory ID...

Apple iOS 10.3 - Control Panel Denial of Service Vulnerability

Document Title: =============== Apple iOS 10.3 - Control Panel Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2059 Video: https://www.youtube.com/watch?v=MSscCLATxPQ Release Date: ============= 2017-04-26 Vulnerability Laboratory ID...

WordPress Plugin All In One WP Security & Firewall Cross-Site Scripting

The first plugin that will be analyzed in detail is called All In One WP Security & Firewall. It adds some additional layers of security to Wordpress, for example a brute force protection for the login or file permission checks. There are definitely quite a lot of good ideas integrated into this...

CVE-2016-2104

This CVE relates to multiple XSS vulnerabilities in Red Hat Satellite 5 (Spacewalk) where an attacker can inject arbitrary script/HTML via parameters such as label, package_name, search_subscribed_channels, channel_filter, or vectors like input:hidden /bean:message . The issue is documented acros...

SQL injection vulnerability in the uid parameter in the admin_members.php page of the Ocean CMS website builder system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the /admin/adminmembers.php page of the Ocean CMS system. The lack of filtering of the "uid" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

Buffer overflow

Touch Panel TP driver in Huawei NEM phones with software Versions before NEM-AL10C00B130, Versions before NEM-UL10C17B160, Versions before NEM-UL10C00B160, Versions before NEM-TL00C01B160 allows attackers to get root privilege or crash the system or execute arbitrary code, related to a buffer...

CVE-2016-8775

CVE-2016-8775 concerns the Touch Panel (TP) touchscreen driver in Huawei devices. The connected sources describe a buffer overflow caused by insufficient parameter checking in the TP driver, affecting Huawei phones such as the Play 5C and other models cited in the Huawei security advisory HWPSIRT...

CVE-2016-8775

Touch Panel TP driver in Huawei NEM phones with software Versions before NEM-AL10C00B130, Versions before NEM-UL10C17B160, Versions before NEM-UL10C00B160, Versions before NEM-TL00C01B160 allows attackers to get root privilege or crash the system or execute arbitrary code, related to a buffer...

ICMusic CMS 1.x SQL Injection

Title: ICMusic CMS v1.x - Authentication Bypass Credit: Bilal KARDADOU Vendor: http://www.icloudcenter.com Vendor URL: http://www.icloudcenter.com/music-site-script.htm Product: ICMusic CMS v1.x Google Dork: N/A Product & Service Introduction: "ICMusic" is a music directory site script, ready for...

Freelancer Script 4.0.1 SQL Injection

Title: FREELANCER SCRIPT v4.0.1 - Authentication Bypass & SQL injection Credit: Bilal KARDADOU Vendor: http://www.2daybiz.com Vendor URL: http://2daybiz.com/content/products/products/job-site-script/119-freelancer-script.php Product: FREELANCER SCRIPT v4.0.1 Google Dork: N/A Product & Service...

KLA10984 Privilege escalation vulnerabilities in Windows kernel

Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An improper check of a buffer length prior to copying memory to the buffer can be exploited remotely ...

ICAutosales 1.2 SQL Injection

Title: ICAutosales v1.2 - SQL Injection Credit: Bilal KARDADOU Vendor: http://www.icloudcenter.com Vendor URL: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Product: AUTO DEALER CAR SALES PHP SCRIPT. Google Dork: N/A Product & Service Introduction: ICAutosales is a powerful, highly...

CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

bpsdm.pu.go.id XSS vulnerability

Vulnerable URL: http://bpsdm.pu.go.id/karir/admin/manage?statusverifikasi=all=testprompt/OPENBUGBOUNTY/...

Unspecified Vulnerability in Vivint SkyControl Panel

Vivint SkyControl Panel is a control panel interface for centralized smart home management from Vivint USA. A security vulnerability exists in Vivint SkyControl Panel version 1.1.1.9926. A remote attacker can exploit the vulnerability to enable and disable the alarm system and change other securi...

CVE-2016-9408

Cross-site scripting XSS vulnerability in the Mod control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users...

CVE-2016-9409

Cross-site scripting XSS vulnerability in the Admin control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs...

CVE-2016-9421

Cross-site scripting XSS vulnerability in the Users module in the Admin control panel in MyBB aka MyBulletinBoard before 1.8.8 and MyBB Merge System before 1.8.8 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-9406

Cross-site scripting XSS vulnerability in the User control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...