2666 matches found
sniperbets.com XSS vulnerability
Open Bug Bounty ID: OBB-586702 Description| Value ---|--- Affected Website:| sniperbets.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
GreyKey iPhone Unlocker
Some details about the iPhone unlocker from the US company Greyshift, with photos. Little is known about Grayshift or its sales model at this point. We don't know whether sales are limited to US law enforcement, or if it is also selling in other parts of the world. Regardless of that, it's highly...
Our Journey to GDPR Compliance: Lessons learned on our way to May 25th
With the European Union’s EU General Data Protection Regulation GDPR date fast approaching, we have been working hard to make sure our already strong security culture and policies will align with the new regulation. As GDPR is a very broad law that includes people, process, and technology, workin...
Trend Micro Smart Protection Server Encryption Key Disclosure
Encryption key disclosure vulnerability in rend Micro Smart Protection Server Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Zenario CMS File Disclosure
File disclosure vulnerability in Zenario CMS compressor.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
With the Predictive Security Cloud (PSC) Leading the Way, Carbon Black is Named One the “Coolest 20 Vendors in Endpoint Security” by CRN
Editor’s Note: Victor Baez, Carbon Black’s VP of WW Channel and this blog’s author, was recently named a 2018 CRN Channel Chief. As part of CRN's annual Security 100 list, 20 endpoint companies have been named “Coolest Endpoint Security Vendors of 2018.” Carbon Black is among them. We are honored...
vTiger File Upload
File upload vulnerability in vTiger CompanyDetailsSave.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
ManageEngine OpManager SQL Injection
SQL query restriction bypass vulnerability via default hardcoded admin account Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
nicepebblessales.com XSS vulnerability
Open Bug Bounty ID: OBB-561274 Description| Value ---|--- Affected Website:| nicepebblessales.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Symantec Endpoint Protection Manager File Upload
File upload vulnerability in Symantec Endpoint Protection Manager Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
breednet.com.au XSS vulnerability
Open Bug Bounty ID: OBB-558120 Description| Value ---|--- Affected Website:| breednet.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Soyket Chowdhury Vehicle Sales Management System Code Execution Vulnerability
Soyket Chowdhury Vehicle Sales Management System is an online vehicle sales system script. A security vulnerability exists in multiple scripts in Soyket Chowdhury Vehicle Sales Management System version 2017-07-30. An attacker can exploit this vulnerability to obtain user login accounts and perfo...
CVE-2017-1000474
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...
CVE-2017-1000474
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...
Sql injection
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...
CVE-2017-1000474
The CVE refers to Soyket Chowdhury Vehicle Sales Management System (VSMS) v2017-07-30 with multiple vulnerabilities in login scripts (vehicle.php, profile.php, Actions.php, manage_employee.php, sell.php) enabling SQL Injection and Stored XSS that can lead to remote code execution. Connected data ...
CVE-2017-1000474
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manageemployee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Store...
WordPress Gravity Forms File Upload
File upload vulnerability in WordPress Gravity Forms plugin upload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...