CVE-2017-1212

Affected products and issue. IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0.2 are vulnerable to a denial of service when viewing or opening a large file (CVE-2017-1212). The root cause is not elaborated beyond the documented large-file handling leading to DoS. Impact ...

Dradis Framework - Collaboration and reporting for IT Security teams

Dradis is an open-source collaboration framework, tailored to InfoSec teams. Goals Share the information effectively. Easy to use, easy to be adopted. Otherwise it would present little benefit over other systems. Flexible: with a powerful and simple extensions interface. Small and portable. You...

Easy Blog PHP Script 1.3a - 'id' SQL Injection

Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection Date: 2017-09-27 Exploit Author: 8bitsec Vendor Homepage: https://www.codester.com/ Software Link: https://www.codester.com/items/4616/easy-blog-php-script Version: 1.3a Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...

SugarCRM Cross-Site Scripting Vulnerability

SugarCRM Professional is a professional version of an open source customer relationship management system CRM from SugarCRM USA. The system supports differentiated marketing for different customer needs, managing and distributing sales leads, and enabling information sharing and tracking of sales...

Become A Certified Hacker – 5 Online Learning Courses for Beginners

Hacking is not a trivial process, but it does not take too long to learn. If you want to learn Ethical Hacking and Penetration testing, you are at right place. We frequently receive emails from our readers on learning how to hack, how to become an ethical hacker, how to break into computers, how ...

invesco.com XSS vulnerability

Open Bug Bounty ID: OBB-293166 Description| Value ---|--- Affected Website:| invesco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)

Nimble Professional 1.0 - Cross-Site Request Forgery Update Admin Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin) Vulnerability

Exploit for php platform in category web applications Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile 0day.today 2018-02-15...

Professional Service Booking Software 1.0 SQL Injection

Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo: http://professionalservice.scriptzee.com/ Version: 1.0 Category:...

Nimble Professional 1.0 Cross Site Request Forgery

Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)

Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...

Professional Service Booking 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo:...

Professional Service Booking 1.0 - SQL Injection

Professional Service Booking 1.0 - SQL Injection Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo:...

CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

LMS King Pro, SQL Injection

LMS King Lite and LMS King Professional by king-products.net, versions up to 3.2.3.19 lite and 3.2.3.47 pro, SQL Injection resolution: update to version 3.2.3.20 lite and 3.2.3.48 pro update notice url: https://www.king-products.net/lms-king.html...

Akamai Is Named A Leader In Gartner's Magic Quadrant For Web Application Firewalls

"Don't work for recognition, but do work worthy of recognition" - H. Jackson Brown. A friend sent this quote to me after I explained to her my ambivalence about being recognized by Gartner as a "Leader" in their Web Application Firewall Magic Quadrant. I had mixed feelings because I wanted to...

Memory corruption

Data corruption vulnerability in firmware in Intel Solid-State Drive Professional PSF104P, PSF109P allows local users to cause a denial of service via unspecified vectors...

CVE-2017-5694

CVE-2017-5694 affects Intel Solid-State Drive Professional firmware PSF104P and PSF109P. A vulnerability in the firmware allows a local attacker to cause a denial-of-service via data corruption of the device, with the attack surface described as local access and unspecified vectors. The available...

Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11233)

A memory corruption vulnerability exists in Adobe Acrobat and Reader. the vulnerability is due to how the image conversion engine processes Enhanced Metafile Format EMF. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted EMF file with Adobe...