EUVD-2007-2665

Malware in sbrugna...

EUVD-2017-12271

Malware in sbrugna...

U.S. Dept Of Defense: IDOR leaking PII data via VendorId parameter

Description: Dear DoD, I found one bug on your domain from Hack US program: █████ It's IDOR bug. Make sure to know that I didn't test many funcs here for IDOR. I didn't test for ATO Account Takeover. But you should fix this. Here's the PoC: ██████████ Thank you DoD! Impact An attacker could steal...

The vulnerability of the FortiOS operating system, related to the storage of FortiOS versions in the FortiOS IKE package, allows attackers to disclose sensitive information that is protected by this system.

The vulnerability of the FortiOS operating system is related to the storage of FortiOS versions in the FortiOS IKE packages. Exploiting this vulnerability allows a malicious actor to disclose sensitive information about FortiOS versions by checking the VendorID in the FortiOS IKE packages...

FortiOS IKE VendorID version information disclosure

The FortiOS IKE packets which include the Vendor ID embed the FortiOS build version number...

Information disclosure

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

Pre ADS Portal - cid SQL Injection

Pre ADS Portal - cid SQL Injection Mega ADS Portal cid Remote SQL Injection Vulnerability ======================================================== Author: Hussin X Home : iq-ty.com/vb email: darkangelg85atYahooDoTcom Vendor : http://www.preprojects.com/ads.asp Exploit:...

Sql injection

SQL injection vulnerability in includes/funcsvendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendorinfo cmd action to censura.php...

censura-sql.txt

============================================== Censura v1.15.04 vendorid Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...