4313 matches found
CVE-2018-8998
CVE-2018-8998 affects Advanced SystemCare Ultimate 11.0.1.58 via the driver Monitor_x86.sys. The issue arises from failure to validate input values from IOCTL 0x9c4060cc, enabling local attackers to trigger a denial of service (BSOD) and potentially other unspecified impacts. Publicly documented ...
ultimate-guitar.com XSS vulnerability
Open Bug Bounty ID: OBB-570118 Description| Value ---|--- Affected Website:| ultimate-guitar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress Ultimate Member Plugin 2.0 Multiple XSS Vulnerabilities
The WordPress plugin Copyright C 2018 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
Ultimate Member <= 2.0 - Multiple XSS
The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Multiple XSS security vulnerability...
RISE Ultimate Project Manager SQL Injection Vulnerability
Rise Ultimate Project Manager is a web-based project management system. A SQL injection vulnerability exists in RISE Ultimate Project Manager version 1.9. A remote attacker can exploit this vulnerability by sending the 'search' parameter to the index.php/knowledgebase/getarticlesuggestion/ file t...
Sql injection
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...
CVE-2017-17999
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...
CVE-2017-17999
RISE Ultimate Project Manager 1.9 contains a SQL injection in the knowledge_base get_article_suggestion endpoint. The vulnerability is triggered via the search parameter to index.php/knowledge_base/get_article_suggestion/; an attacker can craft input to execute arbitrary SQL. Public references sh...
CVE-2017-17999
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...
ultimate-guitar.com XSS vulnerability
Open Bug Bounty ID: OBB-538520 Description| Value ---|--- Affected Website:| ultimate-guitar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
RISE 1.9 - search SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 30/12/2017 CVE: CVE-2017-17999 Vendor Homepage: http://fairsketch.com/ Version: 1.9 POST...
RISE 1.9 - 'search' SQL Injection
Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 30/12/2017 CVE: CVE-2017-17999 Vendor Homepage: http://fairsketch.com/ Version: 1.9 POST /index.php/knowledgebase/getarticlesuggestion/ HTTP/1.1 Host: localhost...
ALLMediaServer 0.95 - Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Stack Buffer Overflow in ALLMediaServer 0.95 Exploit Author: Mario Kartone Ciccarelli Contact: https://twitter.com/Kartone CVE: CVE-2017-17932 Thanks to PoC: https://www.exploit-db.com/exploits/43406/ Softwar...
ACDSee UltimatePSD Parsing Memory Corruption Vulnerability
ACDSee Ultimate is a tool for viewing, converting and managing images from ACD Systems Canada. The tool can be used under the Microsoft Windows operating system and ACDSee defines the Photo Album file format, associated with the .ais file extension. A memory corruption vulnerability exists in the...
Memory corruption
A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability...
CVE-2017-2886
A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability...
CVE-2017-2886
A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability...
CVE-2017-2886
ACDSee Ultimate 10.0.0.292 contains a memory corruption flaw in the PSD parsing code (IDE_PSD). A specially crafted PSD file can trigger an out-of-bounds write by using a file-derived value as the size argument for memmove, potentially allowing arbitrary code execution. The TALOS advisory confirm...
CVE-2017-2886
A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability...
Cimetrics BACnet Explorer 4.0 XXE Vulnerability
Summary The BACnet Explorer is a BACnet client application that helps auto discover BACnet devices. Description BACnetExplorer suffers from an XML External Entity XXE vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected...