CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

Open redirect

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

CVE-2017-1000027 concerns Koozali Foundation SME Server (versions 8.x–10.x). The vulnerability is an open URL redirect in the user web login function, enabling unauthorized account access. The available connected documents confirm the affected product family and the open redirect flaw as the root...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

Agora-Project 3.2.2 Cross Site Scripting

Exploit Title: XSS Vulnerability on Agora-Project 3.2.2 Google Dork: no Date: 23-02-2017 Exploit Author: @runggareksya, @AdyWikradinata, @yokoacc Vendor Homepage: https://www.agora-project.net Software Link: https://www.agora-project.net/?ctrl=offline&action=download Software Link Mirror:...

fasttrack.co.uk XSS vulnerability

Vulnerable URL: http://www.fasttrack.co.uk/league-tables/sme-export-track-100/league-table/?leagueyear=2015'"--!confirmOPENBUGBOUNTY...

vianet.com.np XSS vulnerability

Vulnerable URL: https://www.vianet.com.np/sme-plan-form/?product=FiberNet-Infinite-OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 134792 VIP website status:| No Check...

Debian DLA-260-1 : hostapd security update

A vulnerability was found in WMM Action frame processing in a case where hostapd is used to implement AP mode MLME/SME functionality i.e., Host AP driver of a mac80211-based driver on Linux. This vulnerability can be used to perform denial of service attacks by an attacker that is within radio...

Updated hostapd packages fix a security vulnerability

Updated hostapd packages fix security vulnerability: A vulnerability was found in hostapd that can be used to perform denial of service attacks by an attacker that is within radio range of the AP that uses hostapd for MLME/SME operations...

CVE-2014-7314

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7314

The CVE-2014-7314 entry concerns the Android app “The Intelligent SME” (com.magzter.intelligentsme) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive information via a crafted ce...

CVE-2014-7314

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Scriptme SmE 1.21 File Mailer Login SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22081/info SmE File Mailer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Incapsula - Essential Cloud based Security Solution for your Website

Over 2011-2012 we've seen an increase in distributed denial-of-service DDoS attacks and other web attacks on SME's websites. Incapsula is one of the companies whose service is useful to protect your website from all threats and mitigate DDoS attacks which affect your websites, servers, databases,...

Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net

by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...

Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net

From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...

Cow CMS, SME website management system upload vulnerability and fix-vulnerability warning-the black bar safety net

Cow CMS is in the enterprise retail network is designed for SME website development website management system, The Company's business scope covers Internet security software systems and Internet Security Systems Development, Business website planning, web design, hosting, website maintenance,...

Unfixed XSS vulnerability at www.smelearning.org.tw

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.smelearning.org.tw, which at the time of submission ranked 310330 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at www.sme-web.net

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...