Trend Micro InterScan Web Security Virtual Appliance ConfigBackup File Upload

File upload vulnerability in Trend Micro InterScan Web Security Virtual Appliance ConfigBackup servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Trend Micro SafeSync for Enterprise 3.2 check_nfs_server_status RCE

Remote command execution vulnerability in Trend Micro SafeSync for Enterprise checknfsserverstatus Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ICAutosales 1.2 SQL Injection

Title: ICAutosales v1.2 - SQL Injection Credit: Bilal KARDADOU Vendor: http://www.icloudcenter.com Vendor URL: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Product: AUTO DEALER CAR SALES PHP SCRIPT. Google Dork: N/A Product & Service Introduction: ICAutosales is a powerful, highly...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

Multi Outlets POS 3.1 SQL Injection

Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo: http://pos.prosoft-apps.com/pos/ Version: N/A Tested...

Multi Outlets POS 3.1 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

Multi Outlets POS 3.1 - id SQL Injection

Multi Outlets POS 3.1 - id SQL Injection Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

autofinishcarsales.co.uk XSS vulnerability

Vulnerable URL: http://www.autofinishcarsales.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Joomla Component com_blog_calendar SQL Injection

SQL Injection vulnerability in Joomla Component comblogcalendar modid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component com_eventbooking SQL Injection

SQL Injection vulnerability in Joomla Component comeventbooking date parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component com_dtregister SQL Injection

SQL Injection vulnerability in Joomla Component comdtregister cat parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

SonicWALL Global Management System ImagePreviewServlet SQL Injection

SQL Injection vulnerability in SonicWALL Global Management System ImagePreviewServlet logoID parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

eFront libraries/includes/social.php SQL Injection

SQL Injection vulnerability in eFront libraries/includes/social.php id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Product Catalog 8 SQL Injection

SQL Injection vulnerability in WordPress Product Catalog 8 plugin selectedCategory parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance 4.2.1.3 RCE

Remote command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WordPress ReFlex Gallery 3.1.3 File Upload

File upload in WordPress ReFlex Gallery plugin php.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

SonicWALL Global Management System RCE

Remote command execution vulnerability in SonicWALL Global Management System GMC service settimeconfig method Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

SonicWALL Global Management System File Disclosure

File disclosure vulnerability in SonicWALL Global Management System GMC service Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Sales Raider - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sales Raider published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID25719: Email Messages Distributing Malicious Software on October 19, 2016

Medium Alert ID: 49356 First Published: 2016 October 19 19:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25719 may contain the following files: Name |...