Google Android out-of-bounds write vulnerability (CNVD-2019-01560)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the CAacDecoderInit of the aacdecoder.cpp file in Android version 9, which stems from the program's lack of boundary detection. A...

Logic Flaw Vulnerability in Maipu MPSec VPN Series Security Gateway

Mapletree Technology Co., Ltd. is a mainstream network and industry application solution provider in China. A logic flaw vulnerability exists in the Maipu MPSec VPN series security gateway. An attacker can exploit this vulnerability to achieve arbitrary administrator login...

WPScan v3.4.0 - Black Box WordPress Vulnerability Scanner

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites. INSTALL Prerequisites: Ruby = 2.2.2 - Recommended: 2.3.3 Curl = 7.21 - Recommended: latest - FYI the 7.29 has a segfault...

Inova Partner Authorization Bypass Vulnerability (CNVD-2019-08310)

Inova Partner is a CRM solution for biotech, pharmaceutical and other life science companies. An authorization bypass vulnerability exists in 5.0.5-RELEASE, Build 0510-0906 and earlier versions of Inova Partner, which can be exploited by an attacker to access restricted functionality...

SQL Injection Vulnerability in Nanjing Yunhuatong Network Technology Website Building System

Nanjing Yunhuatong Network Technology Station Building System is an enterprise station building system developed by Nanjing Yunhuatong Network Technology Co. There is a SQL injection vulnerability in Nanjing Yunhuatong Network Technology website building system, which can be exploited by attacker...

Sourcetree for macOS parameter injection vulnerability (CNVD-2019-09132)

Sourcetree is a free Mercurial and Git client for Windows and Mac. Sourcetree for macOS suffers from a parameter injection vulnerability that can be exploited by an attacker to execute code on a system via a Git subrepository in a Mercurial repository...

test

test...

WPScan v3.3.1 - Black Box WordPress Vulnerability Scanner

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites. INSTALL Prerequisites: Ruby = 2.2.2 - Recommended: 2.3.3 Curl = 7.21 - Recommended: latest - FYI the 7.29 has a segfault...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-21843)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the defaultValue property of the ComboBox object in Foxit Reader...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-20137)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader in the existence of out-of-bounds read vulnerability. Remote...

SAP HCM Fiori People Profile GBX01 HR Privilege Vulnerability

SAP HCM Fiori People Profile GBX01 HR is a human resource management solution from SAP. An elevation of privilege vulnerability exists in SAP HCM Fiori People Profile GBX01 HR version 6.0, which can be exploited by an attacker to gain privileges due to a failure of the program to perform...

Intel CSME Resource Management Error Vulnerability

Intel CSME is a converged security management engine from Intel Corporation, U.S.A. Intel AMT is one of the active management technology modules. A resource management error vulnerability exists in Intel CSME. An attacker could exploit this vulnerability to cause a denial of service memory leak...

Telegram Vulners Bot - Exploit Search Engine And Security Feed In Your Pocket

Vulners Bot is a Telegram interface for popular vulnerability database. It gives you availability of searching for exploits, tools, patches and many more using Telegram inline queries. But the most powerful feature is customizable security subscriptions feeds. You can select predefined themes or...

Information Disclosure

Npgsql is vulnerable to information disclosure. The database password is written to stdout upon authenticating to the database...

R 3.4.4 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits -------------------------------------------------------- Exploit Title: R v3.4.4 - SEH Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-08-22 Vendor Homepage : https://www.r-project.org/ Tested on OS: Windows 7 Social:...

Buffer Overflow Vulnerability in Sunell Cameras

Jing Yang Sunell camera is a camera produced by Shenzhen Jing Yang Technology Co. A buffer overflow vulnerability exists in the Sunell camera, which can be exploited by attackers to cause a denial of service...

Haiwell C10S0R(-e) PLC Arbitrarily Change Configuration Information Vulnerability

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC is vulnerable to arbitrary change of configuration information, which can be exploited by an attacker to change the configuration information of the PLC through...

SQL Injection Vulnerability in Sichuan Yunbait CMSv1.0 to v2.0 Versions

Sichuan Yunbat CMS is a content management system developed by Sichuan Yunbat Technology Co. Sichuan Yunbat CMS v1.0 to v2.0 versions exist SQL injection vulnerability, remote attackers can exploit the vulnerability, access to sensitive database information...

SQL Injection Vulnerability in Website Building System of Ningbo Youdao Network Technology Co.

Ningbo Youdao Network Technology Co., Ltd. is an Internet company specializing in corporate brand Internet digital communication and Internet integrated marketing. Ningbo Youdao Network Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited b...

F5 BIG-IP ASM Design Vulnerabilities

F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. An attacker cou...