74 matches found
Security Bulletin: IBM QRadar Network Security has updated commons-fileupload for known vulnerabilities (CVE-2016-3092)
Summary IBM QRadar Network Security has updated commons-fileupload to address its known vulnerabilities. Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file uploa...
Arbitrary Password Reset Vulnerability in PHPMyWind v5.4
PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . An arbitrary password reset vulnerability exists in PHPMyWind v5.4. An attacker can exploit this vulnerability to reset a user's password...
phpmywind <=5.4 version of the backstage blind official website demo to verify
No description provided by source...
Foxit Reader Information Disclosure Vulnerability (CNVD-2017-08513)
Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An information disclosure vulnerability exists in Foxit Reader versions prior to 5.4. A man-in-the-middle attacker can exploit this vulnerability to intercept information sent during login API calls...
PHP 5.4.x < 5.4.16 Multiple Vulnerabilities
According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.16. It is, therefore, potentially affected by the following vulnerabilities: - An error exists in the mimetype detection of 'mp3' files that could lead to a denial of service. Bug 64830 - An error exist...
PHP 5.4.x < 5.4.12 Information Disclosure
According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.12. It is, therefore, potentially affected by an information disclosure in the file 'ext/soap/phpxml.c' related to parsing SOAP 'wsdl' files and external entities that could cause PHP to parse remote XM...
PHP 5.4.x < 5.4.11 cURL X.509 Certificate Domain Name Matching MiTM Weakness
Binary data 801107.prm...
SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability
SecurStar DriveCrypt is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability
No description provided by source. CF ShopKart SQL vulnerability By learn3r hacker from Nepal [email protected] Product name: CF ShopKart Version: 5.4 beta or may be lower Product home: www.cfshopkart.com Affected variable: item SQLi examples:...
CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ CF Shopkart 5.3x itemid Remote SQL Injection Vulnerability ============================================================ CF ShopKart SQL vulnerability By learn3r hacker from Nepal...
i-dreams GB 5.4 Final - 'admin.dat' File Disclosure
--------------------------------------------------------- Portal Name: i-dreams.net GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/firebook/data/admdat/admin.dat...
Design/Logic Flaw
F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer dword representation of an IP address "dotless IP address", which allows remote authenticated users to connect to the FirePass administrator console and certain other network...
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service // source: https://www.securityfocus.com/bid/17569/info Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets. Thi...
