School ERP Ultimate 2018 Arbitrary File Download

Exploit Title: School ERP Ultimate 2018 - Arbitrary File Download Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

School ERP Ultimate 2018 SQL Injection

Exploit Title: School ERP Ultimate 2018 - 'fid' SQL Injection Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

School ERP Ultimate 2018 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Ultimate 2018 - Arbitrary File Download Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software...

School ERP Ultimate 2018 - fid SQL Injection

School ERP Ultimate 2018 - fid SQL Injection Exploit Title: School ERP Ultimate 2018 - 'fid' SQL Injection Dork: N/A Date: 2018-10-21 Exploit Author: Ihsan Sencan Vendor Homepage: http://freeschoolerp.com/ Software Link: http://freeschoolerp.com/schoolerp30Nov2017free.zip Software Link:...

CVE-2018-17866

Multiple cross-site scripting XSS vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field...

CVE-2018-17866

Multiple cross-site scripting XSS vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field...

CVE-2018-17866

CVE-2018-17866 affects the WordPress plugin Ultimate Member – User Profile & Membership (vendor/product: Ultimate Member, affected version

CVE-2018-17866

Multiple cross-site scripting XSS vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field...

Ultimate Member < 2.0.28 - Multiple XSS

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Multiple XSS security vulnerability...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

Authentication flaw

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2013-7465

CVE-2013-7465 affects Ice Cold Apps Servers Ultimate 6.0.2(12), where no authentication is required for TELNET, SSH, or FTP, enabling remote attackers to upload PHP scripts and execute arbitrary code. The issue is documented with high CVSS scores (e.g., CVSS v2 base 7.5; CVSS v3 base 9.8) indicat...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

Oracle VirtualBox Manager 5.2.18 r124319 - Name Attribute Denial of Service (PoC)

Oracle VirtualBox Manager 5.2.18 r124319 - Name Attribute Denial of Service PoC Exploit Title: Oracle VirtualBox Manager 5.2.18 r124319 - 'Name Attribute' Denial of Service PoC Discovery by: Jose Eduardo Castro Discovery Date: 2018-09-14 Vendor Homepage: https://www.virtualbox.org/ Software Link:...

Oracle VirtualBox Manager 5.2.18 r124319 - Name Attribute Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Oracle VirtualBox Manager 5.2.18 r124319 - 'Name Attribute' Denial of Service PoC Discovery by: Jose Eduardo Castro Vendor Homepage: https://www.virtualbox.org/ Software Link:...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware and more. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235. A local...

Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...