SQL Injection Vulnerability in Internet Behavior Audit Gateway of Chengdu Flying Fish Star Technology Development Co.

Chengdu Flying Fish Star Technology Co., Ltd. is dedicated to providing intelligent and easy-to-use network communication products and services. A SQL injection vulnerability exists in the Internet Behavior Audit Gateway of Chengdu Flyingfish Star Technology Development Co. An attacker is allowed...

The vulnerability of the ScreenOS operating system, related to deficiencies in authentication procedures, allows a perpetrator to connect to the device with administrator privileges.

The vulnerability of the ScreenOS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain administrator privileges by entering a specially crafted password when connecting to the device via SSH ...

CVE-2015-7930

Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors...

WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS Vulnerability

WordPress Social Essentials Social Stats and Sharing Buttons plugin version 1.3.1 suffers from a cross site scripting vulnerability. WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS Vulnerability Plugin Name : Social Essentials Social Stats and Sharing Buttons Effected Versi...

WordPress User Role 1.4.1 Cross Site Scripting Vulnerability

WordPress User Role plugin version 1.4.1 suffers from a cross site scripting vulnerability. WordPress User Role 1.4.1 Cross Site Scripting Vulnerability Plugin Name : User Role Effected Version : 1.4.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified...

WordPress Relevant Related Posts 1.0.7 Cross Site Scripting Vulnerability

WordPress Relevant Related Posts plugin version 1.0.7 suffers from a cross site scripting vulnerability. WordPress Relevant Related Posts 1.0.7 Cross Site Scripting Plugin Name : Relevant Related Posts Plugin Effected Version : 1.0.7 and most probably lower version's if any Vulnerability :...

WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability

WordPress PDF and Print plugin version 1.7.4 suffers from a cross site scripting vulnerability. WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability Plugin Name : PDF & Print Effected Version : 1.7.4 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS...

WordPress Quotes And Tips 1.19 Cross Site Scripting Vulnerability

WordPress Quotes and Tips plugin version 1.19 suffers from a cross site scripting vulnerability. WordPress Quotes And Tips 1.19 Cross Site Scripting Vulnerability Plugin Name : Quotes and Tips Effected Version : 1.19 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting...

Authentication Bypass Vulnerability in Kerberos Network Authentication Protocol

MIT Kerberos is a set of network authentication protocols developed by the Massachusetts Institute of Technology MIT in the United States, using a client/server structure, and both the client and the server side of the authentication of each other i.e., double authentication. The Kerberos network...

WordPress Portfolio 2.27 Cross Site Scripting Vulnerability

WordPress Portfolio plugin version 2.27 suffers from a cross site scripting vulnerability. WordPress Portfolio 2.27 Cross Site Scripting Vulnerability Plugin Name : Portfolio Effected Version : 2.27 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by...

WordPress BestWebSoft Google Maps 1.2.1 Cross Site Scripting

Plugin Name : BestWebSoft Google Maps Effected Version : 1.2.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the...

WordPress Limit Attempts 1.0.3 Cross Site Scripting / Cross Site Request Forgery Vulnerabilities

Exploit for php platform in category web applications WordPress Limit Attempts 1.0.3 Cross Site Scripting / Cross Site Request Forgery Vulnerabilities Plugin Name : Limit Attempts Effected Version : 1.0.3 and most probably lower version's if any Identified by : Madhu Akula Technical Details Minim...

WordPress Google Sitemap 2.9.1 Cross Site Scripting

Plugin Name : Google Sitemap Effected Version : 2.9.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...

The Kerberos Protocol vulnerability: cause a system completely controlled-vulnerability warning-the black bar safety net

Recently, a security expert in the Windows of the Kerberos authentication system found a“very destructive”vulnerability. Last year had exposed the system in a similar vulnerability, the attacker controls the entire network, including the installation of the program, and delete data. The Kerberos...

Lepide Active Directory Self Service Elevation of Privilege Vulnerability

Lepide Active Directory Self Service is a password self-service solution. A security vulnerability exists in the processing of the password reset feature of Lepide Active Directory Self Service. The vulnerability can be exploited by a domain user to change the password of any user within an Activ...

Cisco Cloud Services Router 1000V Command Injection Vulnerability

Cisco IOS on Cloud Services Router CSR 1000V is a Cisco operating system that runs on the Cisco 1000V family of cloud services routers. A security vulnerability exists in the publish-event event-manager feature of Cisco IOS Release 15.52S and Release 15.53S on Cisco CSR 1000V devices. A local...

QuikCart 6.6 - CSRF Privilege Escalation Exploit

Exploit for php platform in category web applications Title : QuikCart 6.6 - CSRF Privilege Escalation Exploit Author : ZwX Vendor : http://opensolution.org/ Download Link : http://opensolution.org/download/home.html?sFile=Quick.Cartv6.6.zip Version : 6.6 Security Level : Hight Tested Os : Window...

Chrome 0day so that millions of Android devices suffer from a remote threat-vulnerability warning-the black bar safety net

! From China qihoo 3 6 0 security researcher Guang Gong in the latest version of the Android platform, Chrome browser found a serious 0day vulnerability, which allows attacker to obtain the victim's cell phone the full administrator access, and the vulnerability of the use of the code to be able ...

ZOHO ManageEngine OpManager Hardcoded Credentials Vulnerability

ZOHO ManageEngine OpManager is network performance management software. A hard-coded credentials vulnerability exists in ZOHO ManageEngine OpManager. A remote attacker could exploit this vulnerability to gain administrator access...

FerretCMS 2.0.2-alpha - CSRF / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Title : FerretCMS 2.0.2-alpha - Exploit CSRF Vulnerability Author : ZwX Date : 24/02/2015 Download : https://codeload.github.com/JRogaishio/ferretCMS/zip/master Vendor : https://github.com/JRogaishio Level Security : Hight Tested on : Windows ...