2516 matches found
Anonymous hackers vow to expose Q-Anon
By Waqas Q-Anon gained popularity from the Far-Right's favorite website 4chan. The online hacktivist group Anonymous has been missing from the limelight for a while but now, the group is back and vows to carry out a doxxing operation against Q-Anon and expose the real identity of whoever is behin...
Fresh Approach to WiFi Cracking Uses Packet-Sniffing
Legacy WiFi just became a little less safe, according to Jens Steube, the developer of the password-cracking tool known as Hashcat. He has found a faster, easier way to crack some WPA/WPA2-protected WiFi networks. Hackers have compromised the WPA/WPA2 encryption protocols in the past, but it’s an...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
Design/Logic Flaw
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
SansCMS Cross-Site Scripting Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
SUSE-SU-2018:1988-1 Security update for wireshark
This update for wireshark fixes vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files bsc1094301. This includes: - CVE-2018-11356: DNS dissector cras...
PT-2018-12504
Name of the Vulnerable Software and Affected Versions SansCMS version 0.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the q parameter of the 'blog/index.php' endpoint. Recommendations...
CVE-2018-14422: Improper Neutralization of Input During Web Page Generation
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
CVE-2018-0708
Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...
CVE-2018-0709
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...
q-wiki.gamerch.com XSS vulnerability
Open Bug Bounty ID: OBB-648012 Description| Value ---|--- Affected Website:| q-wiki.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
q-bank.eu XSS vulnerability
Open Bug Bounty ID: OBB-647421 Description| Value ---|--- Affected Website:| q-bank.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Remote Code Execution (RCE)
opentsdb is vulnerable to remote code execution RCE attacks. A malicious user can inject and execute arbitrary commands through a q request using the o, key, style, yrange , y2range parameters and the JSON input...
CVE-2018-12972
An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...
CVE-2018-12972
An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...
CVE-2018-12973
An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI...
