62 matches found
Fortinet FortiWLC SQL注入漏洞
Fortinet FortiWLC is a wireless LAN controller from Fortinet. A security vulnerability in Fortinet FortiWLC version 8.6.1 and below can be exploited by an attacker to disclose device, user, and database information via a crafted HTTP request...
CVE-2021-30960
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...
CVE-2021-30962
A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...
Apple tvOS和Apple macOS Big Sur 安全漏洞
Apple tvOS and Apple macOS Big Sur are both products of Apple Inc. Apple tvOS is a smart TV operating system. apple macOS Big Sur is the 17th major version of macOS, Apple's operating system for the MAC. macOS Big Sur is the 17th major version of macOS, Apple's operating system for the MAC. A...
Apple macOS Big Sur 缓冲区错误漏洞
Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur CoreAudio suffers from a buffer error vulnerability that originates from parsing maliciously crafted audio files that could lead to the disclosure of user information. The following products and versions are...
Apple tvOS 缓冲区错误漏洞
Apple tvOS is a set of smart TV operating systems from the American company Apple Apple. A buffer error vulnerability exists in a number of Apple products, where an attacker may be able to disclose user information through a maliciously crafted file. The issue is fixed in iOS 15.1 and iPadOS 15.1...
Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure
The plugin outputs the Hashed Password, Username and Email Address along other less sensitive data of the user related to the Even Head of the Timeslot in the response when requesting the event Timeslot data with a user with the editposts capability. Combined with the other Unauthorised Event...
华为智能手机安全漏洞
Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in a number of Huawei SmartPhones, which stems from a lack of effective permissions licensing and access control measures in the product. The vulnerability can be exploited by an attacker to cause the...
CVE-2020-14275
The CVE-2020-14275 entry concerns HCL Commerce, affecting versions 9.0.0.5–9.0.0.13, 9.0.1.0–9.0.1.14, and 9.1–9.1.4. It states potential denial of service, disclosure of user personal data, and the ability to perform unauthorized administrative operations. No root-cause, affected component/file,...
SOPlanning SQL Injection Vulnerability (CNVD-2020-10632)
SOPlanning is an online planning tool for efficiently organizing projects and tasks. An SQL injection vulnerability exists in the OrderBy clause in SOPlanning 1.45. An attacker can exploit this vulnerability to obtain information about a user's table via the projets.php?order=nomcreateur&by=...
CVE-2019-19985
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...
Information disclosure
Unencrypted communication error in SAP Business Objects Business Intelligence Platform Central Management Console, version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure...
WordPress article2pdf 0.24 DoS / File Deletion / Disclosure Vulnerabilities
WordPress article2pdf plugin versions 0.24 and above suffer from resource exhaustion, arbitrary file download, and file deletion vulnerabilities. Product: article2pdf Wordpress plug-in Product Website: https://wordpress.org/plugins/article2pdf/ Affected Versions: 0.24 and greater The following...
EZSA-2018-007 User data disclosure
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-007-user-data-disclosure...
CVE-2016-6090
Technical details (affected product, component, root cause, impact specifics, or fix) for CVE-2016-6090 are not publicly available in the provided documents. Monitor for updates and additional disclosures.
Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12799)
Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...
PHP TopSites 2.0/2.2 edit.php SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6625/info A vulnerability has been discovered in PHP TopSites. Due to insufficient sanitization of user-supplied URI parameters it is possible for an attacker to embed SQL commands into certain page requests. This may...
Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities
No description provided by source. + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged i...
Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ====================================================== Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities ====================================================== + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGo...
REMOTE SQL INJECTION (SQLi) VULNERABILITY--Photo-Rigma.BiZ v30-->
------------------------------------------------------------------ REMOTE SQL INJECTION SQLi VULNERABILITY--Photo-Rigma.BiZ v30-- ------------------------------------------------------------------ CMS INFORMATION: --WEB: http://foto.rigma.biz affected --DOWNLOAD:...