MyBB ChangUonDyU Advanced Statistics Plugin Cross-Site Scripting Vulnerability

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL.ChangUonDyU Advanced Statistics plugin is used in one of the forum plugin. A cross-site scripting vulnerability exists in version 1.0.2 of the MyBB ChangUonDyU Advanced Statistics plugin. A...

ibm_db Code Execution Vulnerability

ibmdb is an asynchronous/synchronous interface linking node.js and IBM DB2. A security vulnerability exists in ibmdb versions prior to 1.0.2 that originates when a program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the request...

Malicious Package

Overview Version 1.0.2 of awesomereactutility contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview org.springframework.integration:spring-integration-zip provides Zip un- compression support. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal...

HRSALE The Ultimate HRM SQL Injection Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A SQL injection vulnerability exists in HRSALE The Ultimate HRM version 1.0.2. The vulnerability can be exploited by remote attackers to directly alter SQL query statements with the 'awardid' parameter...

HRSALE The Ultimate HRM Cross-Site Scripting Vulnerability

HRSALE The Ultimate HRM is a PHP-based human resource management system. A cross-site scripting vulnerability exists in HRSALE The Ultimate HRM version 1.0.2, which originates from the program failing to validate user-submitted input. A remote attacker can exploit this vulnerability by injecting...

Remote file inclusion

A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user...

CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...

OpenSSL Cache Timing Side Channel Attack Vulnerability

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

OpenSSL Denial of Service Vulnerability (CNVD-2018-06539 )

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A denial of service vulnerability exists in OpenSSL versions 1.1.0, 1.0.2, which stems from the use of recursively overloaded malicious input, constructed with an ASN.1 type that can...

PYSEC-2018-114

Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors...

Jubatus Directory Traversal Vulnerability

Jubatus is an online machine learning framework that runs in a distributed environment. A directory traversal vulnerability exists in Jubatus 1.0.2 and earlier versions. A remote person can exploit this vulnerability to read arbitrary files...

PHP Scripts Mall Alibaba Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Alibaba Clone Script is an e-commerce system from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Alibaba Clone Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PHP Scripts Mall Bitcoin MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Bitcoin MLM Software is a PHP-based bitcoin management software from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Bitcoin MLM Software version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-6867

Cross Site Scripting XSS exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter...

CVE-2018-6861

Cross Site Scripting XSS exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter...

Artifex MuJS Denial of Service Vulnerability

Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, which is used to embed into other software to provide script execution. A security vulnerability exists in the jsparse.c file in Artifex MuJS 1.0.2 and earlier versions, which stems from the program failing to properly...

OpenSSL Security Restriction Bypass Vulnerability

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A security restriction bypass vulnerability exists in OpenSSL version 1.0.2, which can be exploited by an attacker to bypass security mechanisms and perform unauthorized operations...

Jnes 1.0.2 - Stack Buffer Overflow

!/usr/bin/env python coding: utf-8 Exploit Title: Jnes Version 1.0.2 Stack Buffer Overflow Date: 3-11-2017 Exploit Author: crashmanucoot Contact: twitter.com/crashmanucoot Vendor Homepage: http://www.jabosoft.com/home Software Link: http://www.jabosoft.com/categories/3 Version: v1.0.2.15 Tested o...

CVE-2017-2283

WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device...