269 matches found
Beware of Hurricane Florence Relief Scams
If you're thinking of donating money to help victims of Hurricane Florence, please do your research on the charitable entity before giving: A slew of new domains apparently related to Hurricane Florence relief efforts are now accepting donations on behalf of victims without much accountability fo...
Hanwha Techwin Smartcam Denial of Service Vulnerability (CNVD-2018-05237)
Hanwha Techwin Smartcam is a series of security surveillance cameras based on cloud-based services. A denial of service vulnerability exists in Hanwha Techwin Smartcam. An attacker can exploit this vulnerability to cause a denial of service by preventing new camera registrations on a cloud server...
Shanghai HOLLOW Investment Management Co., Ltd APP - HOLLOW Financial has arbitrary number login vulnerability
HOLLOW FINANCE APP is an investment and financing mobile app. Shanghai HaoLu Investment Management Co. HaoLu Financial APP has an arbitrary number login vulnerability, the vulnerability is due to the program failed to limit the number of times the verification code is sent and the valid time. An...
Butler Smart App for Android is vulnerable to malicious bulk registrations
The Butler Smart App is a mobile application that goes along with the smart cat eye device. A malicious bulk registration vulnerability exists in Butler Smart APP for Android. An attacker can exploit the vulnerability to register accounts in bulk, leading to account abuse and consumption of servi...
Outpatient lobby app has information leakage vulnerability
Outpatient Hall APP is a mobile Internet medical care platform that helps users realize a number of services, such as free consultation before consultation, triage and guidance, and booking and registration. There is an information leakage vulnerability in Outpatient Hall APP. Because the APP use...
Joomla com_registrationpro SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Joomla comregistrationpro SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comregistrationpro Vendor Homepage : http://www.joomlashowroom.com/ version : 3.2.12 - 3.2.10 Tested on: BACKBOX...
Joomla Registration Pro 3.2.12 SQL Injection
| / \ | \ / | | | | | / | \ / / \ / \ | | | | | | || | | | | | = 5.0 boolean-based blind - Parameter replace Payload: option=comregistrationpro&view=calendar&Itemid=27&...
Digital Interchange Calendar SQL Injection Vulnerability
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
Pligg 9.9.5 'CAPTCHA' Registration Automation Security Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/30518/info Pligg is prone to a security-bypass weakness. Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead to other attacks. Pligg 9.9.5 i...
Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability & Auth Bypass Vulnerabilty.
No description provided by source. --------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3...
WordPress Member Approval Cross Site Request Forgery
Details ================ Software: Member Approval Version: 131109 Homepage: http://wordpress.org/plugins/member-approval/ Advisory ID: dxw-1970-1172 CVE: CVE-2014-3850 CVSS: 5.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N Description ================ CSRF in Member Approval 131109 permits unapproved...
kernel: taskstats: duplicate entries in listener mode can lead to DoS
The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...
kernel: taskstats: duplicate entries in listener mode can lead to DoS
The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...
UBUNTU-CVE-2011-2484
The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...
Digital Interchange Calendar SQL Vulnerability
Exploit for asp platform in category web applications ============================================== Digital Interchange Calendar SQL Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...
Joomla Component com_recruitmentmanager Upload Vulnerability
Exploit for php platform in category web applications ============================================================ Joomla Component comrecruitmentmanager Upload Vulnerability ============================================================ Title:Joomla Component comrecruitmentmanager Upload...
Multi-Vendor E-Commerce SQL injection Vulnerability
Exploit for unknown platform in category web applications =================================================== Multi-Vendor E-Commerce SQL injection Vulnerability =================================================== / Software Information Vendor : http://www.commodityrentals.com/ Download : n/a...
'Avalanche' Crimeware Kit Fuels Phishing Attacks
A single cybercrime group called “Avalanche” was responsible for nearly one-quarter of all identity theft-related phishing attacks in the first half of 2009, according to a new report by the Anti-Phishing Work Group APWG. According to the report, phishing sites on Avalanche domains target the...
*.com accepted as wildcard match in SSL/TLS name matching
Certificate authorities are expected to vet all certificate registrations, but may fail to prevent fraudulent or erroneous registrations. Certificates which use a wild card immediately before the top level domain, or nulls in the domain name, may pass validation checks in Opera. Sites using such...
GLSA-200804-13 : Asterisk: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200804-13 Asterisk: Multiple vulnerabilities Asterisk upstream developers reported multiple vulnerabilities: The Call Detail Record Postgres logging engine cdrpgsql does not correctly escape the ANI and DNIS arguments before using...