PT-2018-17509

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9 Description A SQL Injection issue exists, allowing potential exploitation through specific parameters in certain API endpoints. The issue can be exploited via the "request id" parameter in...

CVE-2018-6367: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

Buddy Zone 2.9.9 - SQL Injection

Buddy Zone 2.9.9 - SQL Injection Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

Buddy Zone 2.9.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

CVE-2017-15091

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

UBUNTU-CVE-2017-15091

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

DEBIAN-CVE-2017-15091

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

CVE-2017-15091

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

CVE-2017-15093

When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. I...

Workable Zone 1.1 Database Disclosure

============================================================================================================================ | Title : Workable Zone v1.1 Human Resource Management System data base Disclosure Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on :...

PT-2018-5758

Name of the Vulnerable Software and Affected Versions: PowerDNS Authoritative versions 3.x up to and including 3.4.11 PowerDNS Authoritative versions 4.x up to and including 4.0.4 Description: The issue concerns the API component, where certain operations that impact the server state are permitte...

CVE-2017-15091: Incorrect Authorization

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

PT-2018-1846

Name of the Vulnerable Software and Affected Versions Qualcomm Biometrics versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660 Description The issue is caused by a buffer overflow in the Qualcomm...

CVE-2017-15620

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmacimport.lua file...

CVE-2017-15620: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmacimport.lua file...

PT-2018-5938

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac import.lua file...

Clooud 1.4.0 Shell Upload

======================================================================================================= | Title : Clooud v1.4.0 - Premium Media Sharing Script unrestricted file upload Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais...

Updated bind packages fix security vulnerability

It was discovered that Bind incorrectly handled certain malformed responses to an ANY query. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service CVE-2016-9131. It was discovered that Bind incorrectly handled certain malformed responses to an AN...

F5 Networks BIG-IP : BIND vulnerability (K59448931)

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection wit...

OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)

Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...