CVE-2015-6839

The CVE-2015-6839 entry concerns MSA vot.Ar 3.1, where the parse function fails to prevent a candidate from receiving multiple votes. The underlying issue is a vulnerability in the parsing logic that allows an RFID ballot tag crafted by an attacker in close physical proximity to cause multiple vo...

CVE-2016-10503

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803...

Design/Logic Flaw

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803...

Legal Robot: Improper validation of parameters while creating issues

Heya LegalRobot Team, There is some Improper Access Control on the /Issues/insert endpoint, which leads to three notable vulnerabilities. ----- The first allows attackers to create public issues without undergoing review by setting state: "Open" and public: true. A sample request is given below:...

Urban Dictionary: Race Condition in Definition Votes

There exists a race condition vulnerability in definition votes, allowing any user to artificially manipulate the number of up/down votes for a definition by making asynchronous requests to vote. A malicious user can use this method to reach any number of up or down votes for a definition. See th...

Nasdaq to Use Bitcoin-style Blockchain to Record Shareholder Votes

The Nasdaq stock exchange and the Republic of Estonia have announced the use of Blockchain-based technology to allow shareholders of companies to e-vote in shareholder meetings even when they're abroad, according to Nasdaq's press release. Global stock market giant is developing an electronic...

Joomla com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------- joomla component comfooblasuggestions ideaid SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...

Joomla <= 1.0.10 - (poll component) Arbitrary Add Votes Exploit

No description provided by source. ?php Joomla poll component add unlimited votes Computer Security Researchers Institute works regardless of php.ini settings by trueend5 http://www.KAPDA.ir errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 2; obimplicitflush 1; echo...

CVE-2013-5640

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...

A voting system bug, cause you can brush votes brush downloads-vulnerability warning-the black bar safety net

This article does not for a particular activity or site, the ASP voting system relates to many website activities. Its core code is the same, just styled somewhat questioningly. Don't want everyone to bulk engage in Station, but occasionally hit peripheral participation activities can use this BU...

Albania Hackers won Voting Poll : Who are the best Hackers ?

Albania Hackers won Voting Poll : Who are the best Hackers ? Hello Friends, We are Happy to inform you guys that, after Open Voting of 30 days on question "Who are the Best Hacker ?" , Finally "Albania Hackers" won by 246 Votes . Total No. of Votes : 694 Thankyou For Visiting "The Hacker News" Cr...

Max Anket v1.0 - Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Max Anket v1.0 - Multiple Remote Vulnerabilities ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Authentication flaw

AJ Square Free Polling Script AJPoll Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php...

CVE-2008-7045

AJ Square Free Polling Script (AJPoll) Database version is affected by CVE-2008-7045, which allows remote attackers to bypass authentication and reset poll votes by issuing a direct request to admin/resetvote.php. This is the concrete vulnerability described in the CVE entry; no remediation or af...

CVE-2009-1036

The linked records indicate a CSRF vulnerability in the Drupal Plus 1 module, versions before 6.x-2.6. The root cause is not described beyond CSRF allowing remote attackers to cast votes for content via unspecified URI aspects. Affected product: Plus 1 module for Drupal (pre-6.x-2.6). There is no...

CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

DEBIAN-CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

Code injection

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...

CVE-2009-0936

Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service infinite loop via "corrupt votes."...