CVE-2017-9324

The CVE-2017-9324 issue affects OTRS versions 3.3.x (up to 3.3.16), 4.x (up to 4.0.23), and 5.x (up to 5.0.19). A user with agent permissions can open a crafted URL (index.pl?Action=Installer with ;Subaction=Intro/Start/System) to gain administrative privileges, then read and modify all system se...

Information Disclosure

Moodle is vulnerable to information disclosure. The submission plugin in the assignment module allows attackers to read or modify other user's submission comments through URL manipulation...

Directory Traversal

gomeplus-h5-proxy is vulnerable to directory traversal attacks. These attacks are possible by putting ../ in a url...

Directory Traversal

badjs-sourcemap-server is vulnerable to directory traversal attacks. Theses attacks are possible by placing ../ in a url...

CVE-2017-8875

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL...

blueandme.net XSS vulnerability

Vulnerable URL: http://www.blueandme.net/blueandme/index.aspx?brand=fga〈="alert/OPENBUGBOUNTY/...

vannes.brit-hotel.fr XSS vulnerability

Vulnerable URL: http://vannes.brit-hotel.fr/mapframe.php?lat=;...

New Relic: A user with restricted privileges is able to view Phone Number + Billing Email of account owner

Hello - A user with restricted access is able to view the phone number and the billing email of the account owner by simply ".json" at the end of the "https://rpm.newrelic.com/accounts/" URL. The URL structure looks like this: https://rpm.newrelic.com/accounts/██████.json Wherin "███████" is the...

Drupal 7.x < 7.24 Multiple Vulnerabilities

Binary data 9727.prm...

Nextcloud: Content spoofing in lookup.nextcloud.com

Scenerio An attacker can include any arbitrary text using specially crafted nextcloud url. This is done using character /%0d%0a. Steps 1 Attacker distributed the below url by means of spamming or through his website...

FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel

Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...

Samsung Smart Home Camera SNH-P-6410 - Command Injection

Exploit for hardware platform in category remote exploits E-DB Note: source https://www.pentestpartners.com/blog/samsungs-smart-camera-a-tale-of-iot-network-security/ import urllib, urllib2, crypt, time New password for web interface webpassword = 'admin' New password for root rootpassword = 'roo...

Harvest: Users enumeration is possible through cycling through recurring[client_id] argument value.

Details: An attacker can enumerate the names of companies on your site by going to the URL https://harvesterxxx.harvestapp.com/recurringinvoices/new?utf8=%E2%9C%93&recurringclientid=4677449&newclientname= and cycling through the numerical value of the recurringclientid= argument, which will view...

Alibaba Clone B2B Script - Admin Authentication Bypass

Alibaba Clone B2B Script - Admin Authentication Bypass Exploit Title: Alibaba Clone B2B Script Admin Authentication Bypass Date: 2016-05-03 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Exploit : For enter...

pioneer.jp XSS vulnerability

Vulnerable URL: http://pioneer.jp/cgi-bin/device/download/filegetj.pl?file=BDR-XU03JFW103EU.EXE'%22alert'XSSPOSED'...

CVE-2015-5342

The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state...

lifeproof.co.uk XSS vulnerability

Vulnerable URL: https://www.lifeproof.co.uk/en-us/search?q=--...

Don't use Chrome to browse this article, it will crash! - Vulnerability warning-the black bar safety net

! Earlier there 8 characters makes Skype crash example, today we refer to is 1 6 characters make Chrome crash, you just need to click which 1 of 6 characters, and even the mouse just in this 1 6 bytes of the link moving around can cause Chrome to crash. Challenge Google Chrome: just 1 6 character...

KLA11454 Multiple vulnerabilities in SeaMonkey

Multiple vulnerabilities were found in SeaMonkey. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple memory corruption vulnerabilities...

The vulnerability of the Moodle learning management system allows a hacker to gain access to personal contact information and details about unread messages.

The vulnerability of the Moodle learning management system’s sub-component message/index.php is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to personal contact information and details...