3365 matches found
PCHelpWare V2 1.0.0.5 - SC Denial of Service (PoC)
PCHelpWare V2 1.0.0.5 - SC Denial of Service PoC -- coding: utf-8 -- Exploit Title: PCHelpWareV2 1.0.0.5 - 'SC' Denial of Service PoC Date: 15/04/2019 Author: Alejandra Sánchez Vendor Homepage: https://www.uvnc.com/home.html Software Link: http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi Versio...
PT-2019-9597
Name of the Vulnerable Software and Affected Versions TP-LINK WR840N v2 Firmware version 3.16.9 Build 150701 Rel.51516n Description The issue concerns the ping feature in the Diagnostic functionality, which can be exploited by remote attackers to cause a denial of service. This is achieved by...
CVE-2018-18489: Undefined Security Weakness
The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...
PT-2019-2871
Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to a lack of authentication check in the web interface of the FortiOS operating system. This can be exploited by a remote attacker to perform a cross-site request forgery...
EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1178)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain...
EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1181)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain...
Fedora Update for fuse FEDORA-2019-fd54b80806
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: fuse-2.9.9-1.fc30
With FUSE it is possible to implement a fully functional filesystem in a userspace program. This package contains the FUSE v2 userspace tools to mount a FUSE filesystem...
Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 - arac_kategori_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 - 'arackategoriid' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://jettweb.net/u-4-php-hazir-rent-a-car-sitesi-scripti-v2.html Demo Site:...
Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 - arac_kategori_id SQL Injection
Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 - arackategoriid SQL Injection Exploit Title: Jettweb PHP Hazır Rent A Car Sitesi Scripti V2 - 'arackategoriid' SQL Injection Date: 28.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage:...
openSUSE Security Update : xen (openSUSE-2019-418) (Meltdown) (Spectre)
This update for xen to version 4.10.1 fixes several issues bsc1027519. These security issues were fixed : - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass SSB, Variant 4 bsc1092631. -...
SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:0712-1)
This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...
TheCarProject v2 - Multiple SQL Injection Vulnerability
Exploit for php platform in category web applications =========================================================================================== Exploit Title: TheCarProject v2 - 'manid' SQL Inj. Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://thecarproject.org/ Software Link:...
TheCarProject 2 SQL Injection
=========================================================================================== Exploit Title: TheCarProject v2 - 'manid' SQL Inj. Dork: N/A Date: 17-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://thecarproject.org/ Software Link:...
TheCarProject 2 - Multiple SQL Injection
=========================================================================================== Exploit Title: TheCarProject v2 - 'manid' SQL Inj. Dork: N/A Date: 17-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://thecarproject.org/ Software Link:...
Cross site request forgery (csrf)
Zyxel NBG-418N v2 v1.00AAXM.4C0 devices allow login.cgi CSRF...
CVE-2019-6710
CVE-2019-6710 affects Zyxel NBG-418N v2 devices (firmware 1.00(AAXM.4)C0; PoC shows 1.00(AAXM.6)C0) and is a Cross-Site Request Forgery (CSRF) on the login.cgi endpoint. The root cause is CSRF allowing unintended login-related actions without user consent, enabling an attacker to induce the devic...
PT-2019-18278
Name of the Vulnerable Software and Affected Versions Zyxel NBG-418N v2 version 1.00AAXM.4C0 Description The issue allows for a CSRF attack via the "login.cgi" API endpoint. This could potentially be exploited by tricking a user into performing unintended actions. Recommendations For Zyxel NBG-41...
CVE-2019-6710: Cross-Site Request Forgery (CSRF)
Zyxel NBG-418N v2 v1.00AAXM.4C0 devices allow login.cgi CSRF...
Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update is based on the upstream 4.14.100 and fixes at least the following security issues: Cross-hyperthread Spectre v2 mitigation is now provided by the Single Thread Indirect Branch Predictors STIBP support. Note that STIBP also requires the functionality be supported by the...