2458 matches found
CVE-2019-5054: NULL Pointer Dereference
An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 WNR2000v5 with Firmware Version V1.0.0.70 HTTP server. An HTTP request with an empty User-Agent string sent to a page requiring authentication can cause a null pointer dereference,...
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:2345-1)
This update for webkit2gtk3 fixes the following issues : Updated to version 2.24.4 bsc1148931. Security issues fixed : CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615...
WordPress 5.2.3 - Cross-Site Host Modification
WordPress 5.2.3 - Cross-Site Host Modification !/usr/bin/perl -w Wordpress Type: Remote Risk: High Solution: Set security headers to web server and no-cache for Cache-Control Simple Attack Scenarios: o This attack can bypass Simple WAF to access restricted content on the web server, something lik...
WordPress 5.2.3 - Cross-Site Host Modification Exploit
Exploit for php platform in category web applications !/usr/bin/perl -w Wordpress Type: Remote Risk: High Solution: Set security headers to web server and no-cache for Cache-Control Simple Attack Scenarios: o This attack can bypass Simple WAF to access restricted content on the web server,...
IntelBras TELEFONE IP TIP200200 LITE 60.61.75.15 - Arbitrary File Read
IntelBras TELEFONE IP TIP200200 LITE 60.61.75.15 - Arbitrary File Read !/usr/bin/perl -w IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 'dumpConfigFile' Pre-Auth Remote Arbitrary File Read Todor Donev 2019 c Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it...
IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 - Arbitrary File Read Exploit
!/usr/bin/perl -w IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 'dumpConfigFile' Pre-Auth Remote Arbitrary File Read Todor Donev 2019 c Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact...
VX Search Enterprise 10.4.16 - User-Agent Denial of Service
VX Search Enterprise 10.4.16 - User-Agent Denial of Service Exploit Title: VX Search Enterprise v10.4.16 DoS Google Dork: N/A Date: 17.01.2018 Exploit Author: James Chamberlain chumb0 Vendor Homepage: http://www.vxsearch.com/downloads.html Software Link:...
VX Search Enterprise 10.4.16 - (User-Agent) Denial of Service Exploit
Exploit Title: VX Search Enterprise v10.4.16 DoS Exploit Author: James Chamberlain chumb0 Vendor Homepage: http://www.vxsearch.com/downloads.html Software Link: http://www.vxsearch.com/setups/vxsearchentsetupv10.4.16.exe Version: v10.4.16 Tested on: Windows 7 Home x86 CVE : N/A Have been unable t...
CVE-2014-10394
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
Code injection
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
CVE-2014-10394
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
CVE-2014-10394
The CVE-2014-10394 entry affects the WordPress Rich Counter plugin prior to version 1.2.0. The vulnerability is a JavaScript injection resulting from a crafted User-Agent header, as documented across multiple sources (NVD entry and vendor/Red Hat references). The practical impact is an injection ...
CVE-2014-10394
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
CVE-2014-10394: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
PT-2019-7070
Name of the Vulnerable Software and Affected Versions rich-counter plugin versions prior to 1.2.0 for WordPress Description The issue concerns JavaScript injection via a User-Agent header. This allows for malicious code execution. No information is provided about the estimated number of potential...
User Agent String Switcher Service - XSS Vulnerabilities
Document Title: =============== User Agent String Switcher Service - XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2189 Release Date: ============= 2019-08-13 Vulnerability Laboratory ID VL-ID: ====================================...
Rest Cafe And Restaurant Website CMS SQL Injection
Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter: slug news.php GET Request GET //host/path/news.php?slug=x'...
Rest - Cafe and Restaurant Website CMS - slug SQL Injection
Rest - Cafe and Restaurant Website CMS - slug SQL Injection Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter...
Weblate: HTML injection and information disclosure in support panel
Hello Weblate Team! I found HTML injection and information disclosure in support panel Description There is a form to weblate.org and hosted.weblate.org to send to support I poisoned the request, where I inserted such payload in all fields: " After that, when my payload got into the support panel...
