332 matches found
PHPCMS V9 full version of the reflective XSS
No description provided by source...
CVE-2016-8963
IBM BigFix Inventory v9 and IBM License Metric Tool v9 are affected by CVE-2016-8963 due to sensitive information being stored in server log files that could be read by a local user. The IBM Security Bulletin confirms the vulnerability in the server-side logging and provides remediation: upgrade ...
CVE-2016-8977
CVE-2016-8977 affects IBM License Metric Tool v9 and IBM BigFix Inventory v9. The IBM Security Bulletin confirms that HTTP GET requests could disclose sensitive information to an unauthorized user, enabling information disclosure that could support further attacks. Affected products include IBM B...
CVE-2016-8967
IBM BigFix Inventory v9.2 (and IBM License Metric Tool v9) are affected by CVE-2016-8967, where user credentials are stored in clear text, enabling local read by an attacker with access to the system. The IBM Security Bulletin confirms the vulnerability and that a fix is tentatively planned for t...
CVE-2016-8966
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
Information disclosure
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2016-8961
IBM BigFix Inventory v9.x and IBM License Metric Tool v9.x are affected by CVE-2016-8961 due to a vulnerability where a user-controlled input specifies a link used in an external redirect. An attacker could lure a user to a crafted site to spoof the displayed URL and redirect to a malicious site,...
CVE-2016-8966
IBM BigFix Inventory v9.x and IBM License Metric Tool v9.x are affected by CVE-2016-8966 due to a missing HTTP Strict Transport Security header. The root cause is the improper enablement of HSTS, which could allow a remote attacker to obtain sensitive information via man-in-the-middle techniques....
CVE-2016-8966
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2016-8981
CVE-2016-8981 affects IBM License Metric Tool v9.x and IBM BigFix Inventory v9.x. The issue stems from cache-control/header usage that allows web pages containing sensitive information to be cached locally by a browser, potentially readable by other users on the same system. Impact described as a...
CEH® v9 Exam Prep 2017 Edition - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application CEH® v9 Exam Prep 2017 Edition published at the 'play' market has multiple vulnerabilities...
PHPCMS V9 member_group.php file SQL injection vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 membergroup.php file, which allows attackers to exploit the vulnerability t...
PHPCMS V9 role.php file SQL injection vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 role.php file, which allows attackers to exploit the vulnerability to obtai...
PHPCMS V9 version of the background design flaws lead to arbitrary code execution vulnerability
Source link: http://www.cnbraid.com/ 0x01 background Since the default after installation requires Super administrator privileges, so the vulnerability is very tasteless, but the feeling should be in other cms, there are also, so the main share under the mining idea PS: using the test environment...
KingCms v9 /user/manage.php username参数等2处SQL注入
No description provided by source...
SureBackup Fails After MS Update KB3139914
Challenge SureBackup script tests fail as seen below: Info SureBackup VMNAME ScriptTests Begin 'Predefined script 1: name DNS Server, starting...' Error Failed to create process with net logon ERRORENVVARNOTFOUND System.Exception This is the DNS Script test specifically. The various script tests...
Nfdump Nfcapd 1.6.14 - Multiple Vulnerabilities
Exploit for linux platform in category dos / poc Nfdump Nfcapd Multiple Vulnerabilities Affected Versions: Nfdump = 1.6.14 PDF: http://www.security-assessment.com/files/documents/advisory/Nfdump%20nfcapd%201.6.14%20-%20Multiple%20Vulnerabilities.pdf +-------------+ | Description | +-------------+...
Nfdump Nfcapd 1.6.14 - Multiple Vulnerabilities
Nfdump Nfcapd 1.6.14 - Multiple Vulnerabilities , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Nfdump Nfcapd Multiple Vulnerabilities Affected Versions: Nfdump = 1.6.14 PDF:...
Nfdump Nfcapd 1.6.14 - Multiple Vulnerabilities
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Nfdump Nfcapd Multiple Vulnerabilities Affected Versions: Nfdump = 1.6.14 PDF:...