12643 matches found
PhpTpoint Pharmacy Management System SQL Injection Vulnerability
PhpTpoint Pharmacy Management System is a pharmacy management system developed using the PHP language. A SQL injection vulnerability exists in the 'username' parameter of the index.php file in PhpTpoint Pharmacy Management System, which can be exploited by a remote attacker to bypass the login pa...
WUZHI CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-09136)
WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 there is a cross-site request forgery vulnerability, an attacker can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1 to take advantage of...
WUZHI CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-09137)
WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 exists cross-site request forgery vulnerability, an attacker can change the super administrator's username via index.php?m=core&f=panel&v=editinf to take advantage of this...
NETGEAR WiFi Router R6120 - Credential Disclosure Vulnerability
Exploit for hardware platform in category web applications Exploit Title: NETGEAR WiFi Router R6120 - Credential Disclosure Exploit Author: Wadeek Hardware Version: R6120 Firmware Version: 1.0.0.30 Vendor Homepage: https://www.netgear.com/support/product/R6120.aspx Firmware Link:...
Netgear WiFi Router R6120 - Credential Disclosure
Exploit Title: NETGEAR WiFi Router R6120 - Credential Disclosure Date: 2018-10-28 Exploit Author: Wadeek Hardware Version: R6120 Firmware Version: 1.0.0.30 Vendor Homepage: https://www.netgear.com/support/product/R6120.aspx Firmware Link:...
CVE-2018-18712
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1...
CVE-2018-18712
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1...
CVE-2018-18704
PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter...
CVE-2018-18704
PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter...
Cross site request forgery (csrf)
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1...
SUSE-SU-2018:3540-1 Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. OpenSSH developers do not want to treat such ...
Prayer Information Disclosure Vulnerability
Prayer is an IMAP-based Web mail server. An information disclosure vulnerability exists in Prayer that stems from the header.t lack of no-referrer setting. An attacker can exploit this vulnerability to obtain a username...
zzcms SQL Injection Vulnerability (CNVD-2018-26013)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ajax/zs.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...
IBM WebSphere MQ Login Check
This module can be used to bruteforce usernames that can be used to connect to a queue manager. The name of a valid server-connection channel without SSL configured is required, as well as a list of usernames to try. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2018-18712
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1...
CVE-2018-18704
PhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php username parameter...
CVE-2018-18655
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting...
DEBIAN-CVE-2018-18655
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting...