Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists as an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINTATINFINITY" when it should not...

CVE-2020-10229

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts...

CVE-2020-10229

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts...

Cross site request forgery (csrf)

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcmspid=-70 can add a user...

CVE-2020-19889

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcmspid=-70 can add a user...

The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer software allows a intruder to gain access to modify, add, or delete data.

The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer visualization software relates to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to remotely access and modify, add, or delete data using the...

The vulnerability of the User Interface component of the Oracle Advanced Outbound Telephony application, which allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Advanced Outbound Telephony application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using the HTTP...

The vulnerability of the Discovery and collection script component of the Oracle Configuration Manager software, which is used for collecting configuration information about client configurations. This vulnerability allows an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Discovery and collection script component of the Oracle Configuration Manager software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to...

The vulnerability of the Data Masking component regarding data copying from working Oracle systems allows attackers to modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of Data Masking in copying data from Oracle workstations exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected information...

The vulnerability of the Mobile Expenses Admin Utilities component of the Oracle Internet Expenses application allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Mobile Expenses Admin Utilities component of the Oracle Internet Expenses application relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to gain access to the ability to modify, add, or delete data...

The vulnerability of the Segment component in the Oracle Retail Customer Management and Segmentation Foundation software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to modify, add, or delete data...

The vulnerability of the CRM User Management Framework component of Oracle Common Applications allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of Oracle Common Applications is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to modify, add, or delete data...

Cross site scripting

"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potentially giving an attacker ability to inject malicious code into the system. "...

CVE-2019-4091

CVE-2019-4091 relates to cross-site scripting in HCL Marketing Platform, specifically during addition of new users and while searching for users in the Dashboard. The available documents state an attacker could inject malicious code, but no explicit affected versions, root cause analysis, exploit...

The vulnerability of the web interface of D-Link DIR-865L router’s microprogramming software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the web interface of D-Link DIR-865L router software is related to the lack of protection against Cross-Site Request Forgery CSRF attacks. Exploiting this vulnerability allows a malicious actor to gain access to modify, add, or delete data...

EulerOS 2.0 SP2 : mercurial (EulerOS-SA-2020-1642)

According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The mpatchapply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the...

Sistem Informasi Pengumuman Kelulusan Online 1.0 CSRF

Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery Add Admin Google Dork: N/A Date: 2020-06-10 Exploit Author: Extinction Vendor Homepage: https://adikiss.net/ Software Link:...

The vulnerability of the Application Framework component of the Cisco IOx software platform allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Application Framework component of the Cisco Iox software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data in the virtual environment...

The vulnerability of the JSE component of Oracle Java SE software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the JSE component of Oracle Java SE software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected information...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to access, modify, add, or delete data.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...