CVE-2019-1003063

CVE-2019-1003063 affects the Jenkins Amazon SNS Build Notifier Plugin. The vulnerability arises because the plugin stores credentials unencrypted in the global configuration file on the Jenkins master, specifically in the org.jenkinsci.plugins.snsnotify.AmazonSNSNotifier.xml, which can be viewed ...

biblioteca.sns.gov.pt XSS vulnerability

Open Bug Bounty ID: OBB-700328 Description| Value ---|--- Affected Website:| biblioteca.sns.gov.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

ZTE ZXCDN-SNS SQL Injection Vulnerability

ZTE ZXCDN-SNS is a hardware device from ZTE Corporation ZTE, China. A SQL injection vulnerability exists in ZTE ZXCDN-SNS versions prior to 4.01.01. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the help of the 'aoData' parameter to disclose information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

Sql injection

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

CVE-2017-10936

ZTE ZXCDN-SNS is affected by an SQL injection in the aoData parameter. In versions prior to 4.01.01, a remote attacker can exploit improper input handling to execute arbitrary SQL commands, leading to disclosure of database contents. Root cause: unsafely crafted input in aoData enables SQL statem...

CVE-2017-10936

SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information...

WhatSNS <=3.6版本前台任意文件上传getshell

...

ics-web.sns.ornl.gov XSS vulnerability

Open Bug Bounty ID: OBB-557142 Description| Value ---|--- Affected Website:| ics-web.sns.ornl.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Serverless, Low Cost, Threat Intel Aggregation: ElasticIntel

ElasticIntel is serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch. It is an alternative to expensive threat intel aggregation platforms which ingest the same data feeds you could get for free. ElasticIntel is designed to provide a central,...

File Inclusion Vulnerability in OpenSNS

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. OpenSNS suffers from a file inclusion vulnerability. Allows an attacker to read the contents of a file by constructing a URL...

Code execution vulnerability in OpenSNS backend AuthorizeController.class.php page

OpenSNS is a lightweight social user center framework based on OneThink. The system upholds a minimalist design style and focuses on communication. A code execution vulnerability exists in the AuthorizeController.class.php page in the OpenSNS backend. Allow attackers to exploit the vulnerability ...

SQL Injection Vulnerability in EasySNS Community Backend Administrator locker method

EasySNS community group version for the new database architecture and program structure, to group as the basic unit to form an interactive community. There is a SQL injection vulnerability in the EasySNS Community background administrator locker method, which can be exploited by attackers to obta...

EasySNS Minimalist Community getusertopic method and index method have SQL injection vulnerability

EasySNS Minimalist Community Group Edition is a new database architecture and program structure to form an interactive community with a group as the basic unit. EasySNS Minimalist Community getusertopic method and index method has a SQL injection vulnerability, the vulnerability is due to the...

sns-park.com XSS vulnerability

Open Bug Bounty ID: OBB-392941 Description| Value ---|--- Affected Website:| sns-park.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Serverless, Real-time Malware Detection: BinaryAlert

BinaryAlert is an open-source serverless AWS pipeline where any file uploaded to an S3 bucket is immediately scanned with a configurable set of YARA rules. An alert will fire as soon as any match is found, giving an incident response team the ability to quickly contain the threat before it spread...

WordPress plugin wp-sns-share suffers from a reflected cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the WordPress plugin wp-sns-share 'index.php' page, which can be exploited by attackers to construct...

WordPress W3 Total Cache Amazon SNS Push Messages Weak Validation Vulnerability

A vulnerability in the validation of Amazon SNS messages was found in the W3 Total Cache plugin. This issue allows an attacker to perform a variety of actions concerning the server's cache, which may result in a denial of service attack. Version 0.9.4.1 is affected...

WordPress W3 Total Cache Amazon SNS Push Messages Weak Validation

------------------------------------------------------------------------ Weak validation of Amazon SNS push messages in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...