CVE-2018-2424

CVE-2018-2424 affects SAP Hana Database (1.00, 2.00), SAP UI5 (1.00; Java) with SAP UI5 versions 7.30–7.50 (and 7.50, 7.51, 7.52) and SAP UI for SAP NetWeaver 7.00 (2.0). The root cause is failure to validate user input before adding it to the DOM, enabling attacker-supplied JavaScript to be inje...

CVE-2017-5414

The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox 52 and Thunderbird 52...

CVE-2018-4226

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local...

CVE-2018-4226

CVE-2018-4226 affects Apple products including iOS before 11.4, macOS before 10.13.5, iCloud before 7.5 on Windows, iTunes before 12.7.5 on Windows, and watchOS before 4.3.1. Issue: local user can bypass restrictions to read sensitive user information. Remediation (as per Apple advisories): apply...

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

Zechat has multiple vulnerabilities

Zechat is a PHP-based online chat application script . Zechat suffers from SQL injection and cross-site request forgery vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive information about the database; change the user's information...

Sql injection

RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain...

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery

Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Date: 2018-05-29 Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 Description : Facebook Clone Script 1.0.5 has csrf vulnerability which attacker ca...

HadSky Light Forum system suffers from an override access vulnerability

HadSky Light Forum System is a free and open forum system for individual users. A vulnerability exists in the HadSky Light Forum System that can be exploited to gain unauthorized access to administrator sensitive information and all user sensitive information. An attacker can exploit the...

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery

Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery Date: 2018-05-29 Exploit Author: L0RD Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/ Version: 1.0.5 Tested on: Win 10 Description : Facebook...

Joomla! Component jCart for OpenCart 2.3.0.2 - Cross-Site Request Forgery

Joomla! Component jCart for OpenCart 2.3.0.2 - Cross-Site Request Forgery Exploit Title: Joomla! extension jCart for OpenCart 2.3.0.2 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or [email protected] Software Link:...

Joomla! Component jCart for OpenCart 2.3.0.2 - Cross-Site Request Forgery

Exploit Title: Joomla! extension jCart for OpenCart 2.3.0.2 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or [email protected] Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/jcart-for-opencart/ Vendor Homepage:...

Joomla JoomOCShop 1.0 Component - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery Exploit Author: L0RD or email protected Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/ Vendor...

Joomla! Component JoomOCShop 1.0 - Cross-Site Request Forgery

Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery Date: 2018-05-28 Exploit Author: L0RD or [email protected] Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/ Vendor Homepage:...

Joomla! Core cross-site scripting vulnerability (CNVD-2018-15243)

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A cross-site scripting vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program's failure to compile the...

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?srank=1520 Version: 1.6.2 Tested...

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery

Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Date: 2018-05-18 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?srank=1520 Version: 1.6.2 Tested on: Kali linux Description : CSRF...

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Date: 2018-05-18 Exploit Author: L0RD Vendor Homepage:...

Horse Market Sell Rent Portal Script 1.5.7 - Cross-Site Request Forgery

Horse Market Sell Rent Portal Script 1.5.7 - Cross-Site Request Forgery Exploit Title: Horse Market Sell & Rent Portal Script 1.5.7 - Cross-Site Request Forgery Date: 2018-05-15 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/horse-market-sell-rent-portal/14174352?srank=1725 CVE...