2314 matches found
CVE-2018-17070: Cross-Site Request Forgery (CSRF)
An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay...
CVE-2018-17069: Cross-Site Request Forgery (CSRF)
An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay...
CVE-2018-15566
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
CVE-2018-15566
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
CVE-2018-15566: Improper Neutralization of Input During Web Page Generation
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
Anonymous hackers vow to expose Q-Anon
By Waqas Q-Anon gained popularity from the Far-Right's favorite website 4chan. The online hacktivist group Anonymous has been missing from the limelight for a while but now, the group is back and vows to carry out a doxxing operation against Q-Anon and expose the real identity of whoever is behin...
Fresh Approach to WiFi Cracking Uses Packet-Sniffing
Legacy WiFi just became a little less safe, according to Jens Steube, the developer of the password-cracking tool known as Hashcat. He has found a faster, easier way to crack some WPA/WPA2-protected WiFi networks. Hackers have compromised the WPA/WPA2 encryption protocols in the past, but it’s an...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
Design/Logic Flaw
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
SansCMS Cross-Site Scripting Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
SUSE-SU-2018:1988-1 Security update for wireshark
This update for wireshark fixes vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files bsc1094301. This includes: - CVE-2018-11356: DNS dissector cras...
CVE-2018-14422: Improper Neutralization of Input During Web Page Generation
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
CVE-2018-0708
Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...
CVE-2018-0709
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...
q-wiki.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-648012 Description| Value ---|--- Affected Website:| q-wiki.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
q-bank.eu XSS vulnerability
Open Bug Bounty ID: OBB-647421 Description| Value ---|--- Affected Website:| q-bank.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Remote Code Execution (RCE)
opentsdb is vulnerable to remote code execution RCE attacks. A malicious user can inject and execute arbitrary commands through a q request using the o, key, style, yrange , y2range parameters and the JSON input...