CVE-2019-12754

Technical details about CVE-2019-12754 are not publicly available in the provided connected documents. Monitor for updates.

Binance Confirms Hacker Obtained Its Users' KYC Data from 3rd-Party Vendor

As suspected, the KYC details of thousands of Binance's customers that hackers obtained and leaked online earlier this month came from the company's third-party vendor, Malta-based cryptocurrency exchange Binance confirmed. For those unaware, Binance, the world's largest cryptocurrency exchange b...

SQL Injection Vulnerability in Tuana VIP Movie Network V3.7.8 wa***.p***

Group ah.com is an Internet + entrepreneurial services trading platform. Group Ah VIP Movie Network V3.7.8 wa.p SQL injection vulnerability can be exploited by an attacker to obtain sensitive information from the database...

How to Log On to StoreFront When Authentication is Disabled on NetScaler Gateway VIP

This article provides information on how to log on to StoreFront when authentication is disabled on NetScaler Gateway VIP...

File Upload Vulnerability in Tuan Ah VIP Movie System

Group ah VIP movie system is a set of registered members with proxy version of the VIP movie video watching website source code. There is a file upload vulnerability in Tuan Ah VIP Movie System. Allows attackers to upload webshell and gain server privileges...

SQL Injection Vulnerability in ad***.php Page of Tuan Ah VIP Movie System

Group ah VIP movie system is a set of registered members with proxy version of the VIP movie video watching website source code. A SQL injection vulnerability exists in the ad.php page of the Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the...

SQL injection vulnerability in the ad***.php page of Tuan ah VIP movie system (CNVD-2019-14839)

Tuan ah VIP movie system is a set of VIP movie video watching website source code with registered member agent version. A SQL injection vulnerability exists in the ad.php page of the Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the database...

Automattic: Wordpress VIP leaks email of the test a/c

i was testing learn.fb.com and i came to known that its wp-json is open and when i saw all the routes of the websites than i got to known that one end-point is leaking their internal email address the endpoint is as follow https://learn.fb.com/wp-json/th/v1/usergeneration The issue has been fixed...

CVE-2019-9696

Symantec VIP Enterprise Gateway all versions may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentiall...

Cross site scripting

Symantec VIP Enterprise Gateway all versions may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentiall...

CVE-2019-9696

Symantec VIP Enterprise Gateway all versions may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentiall...

CVE-2019-9696

CVE-2019-9696 affects Symantec VIP Enterprise Gateway (all versions). The vulnerability is a cross-site scripting (XSS) flaw in the web application, caused by insufficient validation of client-side data, enabling attackers to inject scripts into pages viewed by other users. Potential impact cited...

CVE-2019-8347

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/adminmember.php?action=add&nav=addwebuser&adminpnav=user URI...

Cross site request forgery (csrf)

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/adminmember.php?action=add&nav=addwebuser&adminpnav=user URI...

CVE-2019-8347

CVE-2019-8347 : BEESCMS 4.0 contains a CSRF vulnerability that enables an attacker to add arbitrary VIP accounts through the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI. The connected sources confirm the issue as a CSRF flaw, enabling account creation without proper us...

CVE-2019-8347

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/adminmember.php?action=add&nav=addwebuser&adminpnav=user URI...

vip-collection.pl XSS vulnerability

Open Bug Bounty ID: OBB-708459 Description| Value ---|--- Affected Website:| vip-collection.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

CVE-2018-7956

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information...

Information disclosure

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information...

CVE-2018-7956

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information...