Online Course Registration 2.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Authentication Bypass Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: 2.0...

Croogo Cross-Site Scripting Vulnerability (CNVD-2020-33328)

Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in versions prior to Croogo 3.0.7. T...

File Sharing&Chat v1.0 iOS - Denial of Service Vulnerability

Document Title: =============== File Sharing&Chat v1.0 iOS - Denial of Service Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2222 Release Date: ============= 2020-04-26 Vulnerability Laboratory ID VL-ID:...

Easy Transfer v1.7 iOS - Multiple Web Vulnerabilities

Document Title: =============== Easy Transfer v1.7 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2223 Release Date: ============= 2020-04-26 Vulnerability Laboratory ID VL-ID: ==================================== 222...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-28010)

NETGEAR EX7000 and others are products of NETGEAR, Inc.NETGEAR EX7000 is a wireless network signal extender.WNR3500L is a wireless router.NETGEAR D6400 is a wireless modem.WNR3500L is a wireless router.WNR3500L is a wireless router.WNR3500L is a wireless router.WNR3500L is a wireless...

Mito enterprise website system exists arbitrary file deletion vulnerability

Mito enterprise building system is a commercial open source building system, using PHP + MYSQL architecture. Mito enterprise website system there are arbitrary file deletion vulnerability, attackers can use this vulnerability to delete arbitrary files...

NETGEAR R6700 and R6900 Cross-Site Scripting Vulnerability

The NETGEAR R6700 and NETGEAR R6900 are both a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR R6700 prior to version 1.0.1.36 and the R6900 prior to version 1.0.1.34, which stems from a lack of proper validation of client data by a web application and can...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-25840)

NETGEAR EX7000 and others are a wireless network signal extender from NETGEAR. A cross-site scripting vulnerability exists in several NETGEAR products. The vulnerability stems from the lack of proper validation of client data by the WEB application, which can be exploited by an attacker to execut...

Cross-site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2021-59156)

NETGEAR JNR1010 and others are a wireless router from NETGEAR USA. A cross-site request forgery vulnerability exists in multiple NETGEAR products. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use the...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25588)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

QRadar Community Edition 7.3.1.6 Server Side Request Forgery Vulnerability

QRadar Community Edition version 7.3.1.6 has an issue where the RssFeedItem class of the QRadar web application is used to fetch and parse RSS feeds. No validation is performed on the user-supplied RSS feed URL. Due to the lack of URL validation whitelisting, it is possible for authenticated...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

QRadar Community Edition 7.3.1.6 Cross Site Scripting Vulnerability

QRadar Community Edition version 7.3.1.6 suffers from a reflective cross site scripting vulnerability in the Forensics link analysis page. ------------------------------------------------------------------------ Reflected Cross-Site Scripting in QRadar Forensics link analysis page...

NETGEAR ReadyNAS OS Cross-Site Request Forgery Vulnerability

NETGEAR ReadyNAS OS is a set of operating systems for ReadyNAS network-attached storage devices from NETGEAR. A cross-site request forgery vulnerability exists in NETGEAR ReadyNAS OS 6 using firmware versions prior to 6.9.3. The vulnerability stems from a WEB application that does not adequately...

Air Sender 1.0.2 Arbitrary File Upload

Document Title: =============== Air Sender v1.0.2 iOS - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2212 Release Date: ============= 2020-04-24 Common Vulnerability Scoring System:...

QRadar Community Edition 7.3.1.6 Authorization Bypass Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Authorization bypass in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...

python-twisted: HTTP request smuggling when presented with two Content-Length headers

A flaw was found in python-twisted-web, where it does not correctly process HTTP requests, accepting requests with more than one Content-Length header. When the requests sent from and to the python-twisted-web are processed by another component that correctly processes HTTP requests, for example,...

Sky File 2.1.0 iOS - Directory Traversal Vulnerability

Exploit for php platform in category web applications Title: Sky File 2.1.0 iOS - Directory Traversal Date: 2020-04-21 Software Link: https://apps.apple.com/us/app/sky-file-wireless-transfer/id1236452210 CVE: N/A Document Title: =============== Sky File v2.1.0 iOS - Multiple Web Vulnerabilities...

Cross-Site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2020-31321)

The NETGEAR R7500, among others, is a wireless router from NETGEAR. A cross-site request forgery vulnerability exists in a number of NETGEAR products. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user, and can be exploite...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-31238)

NETGEAR D6200 and others are products of NETGEAR Corporation.NETGEAR D6200 is a wireless modem.NETGEAR WNR2020 is a wireless router.NETGEAR R6220 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is ...