q-park.be XSS vulnerability

Open Bug Bounty ID: OBB-183777 Description| Value ---|--- Affected Website:| q-park.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Q and A Plugin - Full Path Disclosure

This plugin is prone to a multiple scripts direct request path disclosure vulnerability. Solution Update the plugin...

WordPress Q and A Plugin - Authenticated SQL Injection

This plugin is prone to an authenticated SQL injection. Solution Update the plugin...

ImageMagick Arbitrary Process Data Read Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. There is a security vulnerability in ImageMagick. An attacker can exploit this vulnerability to read arbitrary process...

UBUNTU-CVE-2016-5842

MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read...

Parsijoo Cross Site Scripting

================================================================================ Cross Site Scripting on Search Engine Parsijoo ================================================================================ Author: bl4ckmohajem [email protected] home page : http://www.parsijoo.ir/...

WordPress Q&A (Focus Plus) FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/ Version: 1.3.9.7 and...

WordPress Q and A Focus Plus FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Q and A Focus Plus FAQ plugin is prone to full path disclosure and SQL injection vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 - Multiple Vulnerabilities

Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/ Version: 1.3.9.7 and prior Exploit Author: Gwendal Le Coguic Website:...

WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 - Multiple Vulnerabilities

WordPress Plugin Q and A Focus Plus FAQ 1.3.9.7 - Multiple Vulnerabilities Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/...

The vulnerability of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IQ ADC, BIG-IQ Cloud, and BIG-IQ Device – these tools’ access control and remote authentication mechanisms can be exploited by attackers, leading to service interruptions.

The vulnerability of the virtual server component of the access control and remote authentication solution, BIG-IP Access Policy Manager, as well as software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security...

DJMAX TECHNIKA Q - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application DJMAX TECHNIKA Q published at the 'play' market has multiple vulnerabilities...

Q*bert: Rebooted - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Qbert: Rebooted published at the 'play' market has multiple vulnerabilities...

Hi-Q MP3 Voice Recorder (Free) - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Hi-Q MP3 Voice Recorder Free published at the 'play' market has multiple vulnerabilities...

BGQ_REDBOOKS (Doc Number=4680): Blue Gene/Q Security Bulletin notification

Abstract BGQREDBOOKS Doc Number=4680: Blue Gene/Q Security Bulletin notification Blue Gene Knowledge Base document 773911444 : Security Bulletin: GNU C library glibc vulnerability affects CVE-2015-7547 A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects Blue...

iOS song of ice and fire fan outside the post - App Hook the Q & A and iOS 9 bash shell-vulnerability warning-the black bar safety net

In the previous Chapter we talked about in a non-jailbreak iOS on the App Hook. Using this technique, you can be in a non-jailbreak iOS on the system to achieve a variety of hook features, e.g., micro-channel auto-grab a red envelope, the automatic chat robot, game plug-in, etc. But because of...

Vulnerability in OpenSSL - DH small subgroups

Historically OpenSSL usually only ever generated DH parameters based on “safe” primes. More recently in version 1.0.2 support was provided for generating X9.42 style parameter files such as those required for RFC 5114 support. The primes used in such files may not be “safe”. Where an application ...

joomla! 组件GoogleSearch (CSE) V3.0.2 参数q XSS漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '1' ssvid version = '1.0' author = 'kikay' vulDate = '2015-08-29' createDate =...

CVE-2015-8393

pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client...

CVE-2015-8393

CVE-2015-8393: pcregrep in PCRE before 8.38 mishandles the -q option for binary files, potentially exposing sensitive information. In the connected IBM bulletin for Db2 Big SQL, this CVE is listed among multiple PCRE-related flaws; affected product line is IBM Big SQL on IBM Cloud Pak for Data. R...