11715 matches found
CVE-2018-15478
An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The process of registering a device with a cloud account was based o...
CVE-2018-15480
CVE-2018-15480 affects multiple myStrom devices (WiFi Switch V1 <2.66, V2 <3.80, EU <3.80, Bulb <2.58, LED Strip <3.80, Button <2.73, Button Plus
CVE-2018-15478
CVE-2018-15478 affects myStrom WiFi Switch and related devices (V1 < 2.66, V2 < 3.80, EU < 3.80, Bulb < 2.58, LED Strip < 3.80, Button < 2.73, Button Plus
Storefront 3.12 - Unable to start any of the Citrix services
Event ID 304 and 307 registered as error stating that User device registration error. Also we get below mentioned error:...
ASP4CMS AspCMS Elevation of Privilege Vulnerability
ASP4CMS AspCMS is China's ASP4CMS open source laboratory of a free enterprise website construction system . The system supports customized templates and plug-in extensions and other features. ASP4CMS AspCMS 2.5.6 version of a security vulnerability , the vulnerability stems from the /member/reg.a...
CVE-2018-15888
An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly...
CVE-2018-15888
An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly...
CVE-2018-15888
CVE-2018-15888 affects ASPCMS 2.5.6. In /member/reg.asp, the addUser function allows registering ordinary users with the super administrator GroupID, enabling privilege elevation. The available connected sources confirm the vulnerability pattern but do not provide a concrete exploit, affected ver...
Softdisk 3.0.3 - Denial Of Service Exploit
Exploit for windows platform in category dos / poc Exploit Title: Softdisk 3.0.3 - Denial Of Service PoC Author: Gionathan "John" Reale Homepage: http://www.ezbsystems.com/ Software Link: https://www.ezbsystems.com/softdisc/download.htm Tested Version: 3.0.3 Tested on OS: Windows 7 32-bit Steps t...
FlightAirMap Cross-Site Scripting Vulnerability
FlightAirMap is a free, open source application developed using PHP for displaying flights on a map. A cross-site scripting vulnerability exists in the GET variable on the Registration sub-menu page in FlightAirMap 1.0-beta.21 and earlier versions. A remote attacker can exploit this vulnerability...
CVE-2018-1000642
FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...
CVE-2018-1000642
FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...
Cross site scripting
FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...
CVE-2018-1000642
FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...
Rare failure in the Identity Sharing network registration may potentially result in incorrect policy actions
Cause The connection is handled by the PEP Gateway, but no identity is found on the PEP for the connections IPs. With smart pull Identity sharing, the PEP Gateway will hold the connection if: 1. The Access Role is used in the policy and required for the final rulebase match. 2. There is a remote...
ThreatList: Almost All Security Pros Believe Election Systems Are at Risk
As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...
Captcha bypass in extension "Front End User Registration" (sr_feuser_register)
When the extension is used together with the TYPO3 Extension srfreecap, it is possible to bypass the catcha in the registration form...
Monstra-Dev 3.0.4 Cross Site Scripting
Exploit Title:Monstra-Dev 3.0.4 Stored Cross Site Scripting Date: 04-08-2018 Exploit Author: Nainsi Gupta Vendor Homepage: http://monstra.org/ Software Link: https://github.com/monstra-cms/monstra Published In- https://indiancybersecuritysolutions.com/cve-2018-14922-cross-site-scripting/ Product...
Monstra 3.0.4 - Cross-Site Scripting
Monstra 3.0.4 - Cross-Site Scripting. CVE-2018-14922. Webapps exploit for PHP platform Exploit Title:Monstra-Dev 3.0.4 Stored Cross Site Scripting Date: 04-08-2018 Exploit Author: Nainsi Gupta Vendor Homepage: http://monstra.org/ Software Link: https://github.com/monstra-cms/monstra Published In-...
Monstra 3.0.4 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title:Monstra-Dev 3.0.4 Stored Cross Site Scripting Exploit Author: Nainsi Gupta Vendor Homepage: http://monstra.org/ Software Link: https://github.com/monstra-cms/monstra Published In-...