Oracle MySQL Cluster Buffer Overflow Vulnerability (CNVD-2022-07924)

Oracle MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster suffers from a buffer overflow vulnerability, which can be exploited by attackers to read the contents of memory or crash the application...

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-07915)

Oracle MySQL Cluster is a write scalable, real-time, ACID-compatible transactional database developed by Oracle Corporation USA. Oracle MySQL Cluster input validation error vulnerability can be exploited by attackers to execute arbitrary code...

Oracle MySQL Cluster Input Validation Error Vulnerability

MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database. A security vulnerability exists in the Cluster: General component of MySQL Cluster 7.4.33, 7.5.23, 7.6.19, 8.0.26 and earlier versions. An attacker could exploit this vulnerability to allow a highly privileged...

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-18217)

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. An input validation error vulnerability exists in Oracle MySQL Cluster that stems from improper validation of user-supplied data and can be exploited by an attacker to...

a3mo_lib (>=0.1.0, <=0.1.1), acid-store (>=0.1.0, <=0.11.2) +167 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.11, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.40.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =1.2.5 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

RavenDB 4.1.4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: RavenDB 4.1.4 | Multiple Vulnerabilities Date: 25.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://ravendb.net Software Link: https://ravendb.net/download Version: 4.1.4 Introduction Hibernating Rhinos, a global provider of database infrastructure solutions, empowers...

ArangoDB Community Edition 3.4.2-1 - Cross-Site Scripting

Exploit Title: ArangoDB Community Edition 3.4.2-1 | Cross-Site Scripting Date: 17.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.arangodb.com Software Link: https://www.arangodb.com/download-major/ Version: 3.4.2-1 Introduction ArangoDB is a native multi-model, open-source databa...

Bitcoin Bomb Scare Associated with Sextortion Scammers

This blog was written by Jaeson Schultz. Organizations across the country are on edge today after a flurry of phony bomb threats hit several public entities Thursday, such as universities, schools and news outlets, among others. The attackers distributed malicious emails claiming to have placed...

binary-electricals.com XSS vulnerability

Open Bug Bounty ID: OBB-558594 Description| Value ---|--- Affected Website:| binary-electricals.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

AssoCIateD 1.4.4 'menu' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32499/info AssoCIateD ACID is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser...

Inside the 1,000 Red October Cyberespionage Malware Modules

The Red October espionage malware campaign is providing security researchers with a deep dive into the complexity of targeted attacks, which in this case made use of more than 1,000 malware modules for everything from reconnaissance on targets to exfiltration of data to command and control server...

CVE-2005-4878

Multiple cross-site scripting XSS vulnerabilities in 1 acidqrymain.php in Analysis Console for Intrusion Databases ACID 0.9.6b20 and 2 baseqrymain.php in Basic Analysis and Security Engine BASE 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrar...

CVE-2005-4878

Multiple cross-site scripting XSS vulnerabilities in 1 acidqrymain.php in Analysis Console for Intrusion Databases ACID 0.9.6b20 and 2 baseqrymain.php in Basic Analysis and Security Engine BASE 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrar...

CVE-2005-4878

Multiple cross-site scripting XSS vulnerabilities in 1 acidqrymain.php in Analysis Console for Intrusion Databases ACID 0.9.6b20 and 2 baseqrymain.php in Basic Analysis and Security Engine BASE 1.2, and unspecified other console scripts in these products, allow remote attackers to inject arbitrar...

CVE-2005-4878

CVE-2005-4878 details: Multiple XSS vulnerabilities in ACID 0.9.6b20 (acid_qry_main.php) and BASE 1.2 (base_qry_main.php), plus unspecified consoles, allow remote injection via the sig[1] parameter and related inputs. Connected documents also flag a separate but related issue CVE-2007-6156 affect...

AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32499/info AssoCIateD ACID is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

vhcs-root.txt

!/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller has 2 users + Host domaintest.fr is connected /...

VHCS 2.4.7.1 - vhcs2_daemon Remote Code Execution

VHCS 2.4.7.1 - vhcs2daemon Remote Code Execution !/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller...

Debian Security Advisory DSA 893-1 (acidlab)

The remote host is missing an update to acidlab announced via advisory DSA 893-1. Remco Verhoef has discovered a vulnerability in acidlab, Analysis Console for Intrusion Databases, and in acidbase, Basic Analysis and Security Engine, which can be exploited by malicious users to conduct SQL...

Pluxml 0.3.1 Remote Code Execution Exploit

?php This file require the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. Note: The new version is compatible with PHP 4 by default. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; C: sploit.php -url...