CVE-2016-7428

ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...

UBUNTU-CVE-2016-7428

ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...

WordPress plugin Responsive Poll <= 1.7.4 - Cross-Site Scripting (XSS) & CSRF multiple vulnerabilities

WordPress plugin Responsive Poll = 1.7.4 affected by multiple vulnerabilities like Cross-Site Scripting XSS & Cross-Site Request Forgery CSRF. Lack of CSRF checks allows an unauthenticated attacker to modify polls. Also, the plugin fails to escape values put into HTML and thus makes possible for ...

WordPress Plugin Simply Poll SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the pollid parameter of the Simply Poll admin-ajax.php page of the...

WordPress Simply Poll 1.4.1 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Simply Poll 1.4.1 Plugin for WordPress ­ SQL Injection Date: 21/12/2016 Exploit Author: TAD GROUP Vendor Homepage: https://wordpress.org/plugins/simply-poll/ Software Link: https://wordpress.org/plugins/simply-poll/ Contact:...

WordPress Simply Poll 1.4.1 SQL Injection

Exploit Title: Simply Poll 1.4.1 Plugin for WordPress A SQL Injection Date: 21/12/2016 Exploit Author: TAD GROUP Vendor Homepage: https://wordpress.org/plugins/simply-poll/ Software Link: https://wordpress.org/plugins/simply-poll/ Contact: [email protected] Website: http://tad.bg Category: Web...

WordPress Simply Poll 1.4.1 SQL Injection

SQL Injection vulnerability in WordPress Simply Poll plugin pollid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Plugin Simply Poll 1.4.1 - SQL Injection

WordPress Plugin Simply Poll 1.4.1 - SQL Injection Exploit Title: Simply Poll 1.4.1 Plugin for WordPress ­ SQL Injection Date: 21/12/2016 Exploit Author: TAD GROUP Vendor Homepage: https://wordpress.org/plugins/simply-poll/ Software Link: https://wordpress.org/plugins/simply-poll/ Contact:...

WordPress Simply Poll Plugin <= 1.4.1 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit other vulnerabilities in the underlying database. Solution Update the plugin to the latest plugin version...

WordPress Simply Poll Plugin <= 1.4.1 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit other vulnerabilities in the underlying database. Solution Update the plugin to the latest plugin version...

NTP.org ntpd contains multiple denial of service vulnerabilities

Overview NTP.org ntpd versions ntp-4.2.7p385 up to but not including ntp-4.2.8p9 and ntp-4.3.0 up to but not including ntp-4.3.94 contain multiple denial of service vulnerabilities. Description NTP.org's ntpd, versions ntp-4.2.7p385 up to but not including ntp-4.2.8p9 and ntp-4.3.0 up to but not...

polls.tmz.com XSS vulnerability

Vulnerable URL: http://polls.tmz.com/polls/22084/results?stencilid=292=prompt/OPENBUGBOUNTY/...

SQL injection vulnerability in the PollProjectID parameter in the M_PollTech/DataChart.asp page of the information management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the Informationization Management System of Guangzhou Zhongda Dongri Education Technology Co. The lack o...

ww.itimes.com XSS vulnerability

Vulnerable URL: http://ww.itimes.com/poll/which-new-android-phone-are-you-planning-on-buying?key=...

PHPFox 4 Cross Site Scripting

Title : PhpFox4 Cross Site Scripting Vuln. Author : bl4ckMohajeM [email protected] Software Link: http://www.phpfox.com/ Version: 4 Date : 06/09/2016 Category: WebApps Tested with : Ubuntu / Win Description In this Cms theres is a Cross Site Scripting Vurlnerablities in 'nsextt' Parameter...

WordPress CP Polls 1.0.8 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/cp-polls/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI:...

The vulnerability of the OpenSSH cryptographic protection mechanism, which allows a hacker to trigger a service failure.

The vulnerability of the sshpacketreadpoll2 function in the packet.c file of the OpenSSH cryptographic protection mechanism is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure such as reading beyond the memory lim...

WP 插件 Easy Poll 1.1.3 XSS 漏洞

No description provided by source...

joomla com_Nice Ajax Poll 1.4.0 组件SQL注入漏洞

1.google 语法： inurl:"/index.php?option=comniceajaxpoll" 2.随便打开一个网站，利用sqlmap 进行注入. sqlmap.py -u "http://www.cevosop.com/index.php?option=comniceajaxpoll&getpliseid=" --current-user...

Joomla Nice Ajax Poll 1.4.0 SQL Injection Vulnerability

Joomla Nice Ajax Poll component version 1.4.0 suffers from a remote SQL injection vulnerability. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0...