Lucene search
+L

1875 matches found

Hacker One
Hacker One
added 2018/02/16 8:24 a.m.23 views

Semrush: Ad Builder Display Ads Path Traversal

Summary: The Semrush Ad Builder for Display Ads is vulnerable to path traversal when extracting zip files and referencing images from the embedded data.csv file. Description: The Semrush Ad Builder for Display Ads allows users to import Display Ads from an uploaded zip file. The backend...

7AI score
SaveExploits0
HackRead
HackRead
added 2018/02/15 5:05 p.m.52 views

Hackers use Google Ads to steal $50 million of Bitcoin

By Waqas Another day, another Bitcoin scam - This time it abuses Google This is a post from HackRead.com Read the original post: Hackers use Google Ads to steal $50 million of Bitcoin...

6.9AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2018/02/06 6:00 p.m.23 views

Safer Internet Day 2018: ad blockers and anti-trackers

The path to a safer Internet can be a bit of a quandary. What programs should you buy? How long should your passwords be? Is it okay to write them down? What makes a website secure? All of these questions can merit their own lengthy essays, so today, on Safer Internet Day, we’re going to look at...

7.1AI score
SaveExploits0
zdt
zdt
added 2018/02/02 12:00 a.m.77 views

FiberHome AN5506 - Unauthenticated Remote DNS Change Vulnerability

Exploit for hardware platform in category web applications FIBERHOME AN5506 Unauthenticated Remote DNS Change Vulnerability Software Version RP2617 Device Model AN5506-04-F Vendor Homepage: www.fiberhome.com/ Date: 01/02/2018 Exploit Author: r0ots3c http://wandoelmo.com.br...

7.1AI score
SaveExploits0
HackRead
HackRead
added 2018/01/27 6:52 p.m.84 views

Hackers are using YouTube Ads to Mine Monero Cryptocurrency

By Waqas Did you visit YouTube from January 18th to January 26th? There is This is a post from HackRead.com Read the original post: Hackers are using YouTube Ads to Mine Monero Cryptocurrency...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2018/01/26 12:00 a.m.5 views

Classified Ads CMS Quickad SQL Injection Vulnerability

Classified Ads CMS Quickad is a set of PHP based advertising website scripts. A SQL injection vulnerability exists in Classified Ads CMS Quickad version 4.0. A remote attacker can exploit this vulnerability by sending the 'keywords', 'placeid', 'cat', or 'subcat' parameters to the listing URI to...

9.8CVSS8.1AI score0.1915EPSS
SaveExploits5References1
OSV
OSV
added 2018/01/24 10:29 a.m.8 views

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

9.8CVSS5.8AI score0.1915EPSS
SaveExploits5References1
Prion
Prion
added 2018/01/24 10:29 a.m.16 views

Sql injection

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

7.5CVSS9.8AI score0.1915EPSS
SaveExploits5References1Affected Software1
Cvelist
Cvelist
added 2018/01/24 10:00 a.m.27 views

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

9.9AI score0.1915EPSS
SaveExploits5References1
CVE
CVE
added 2018/01/24 10:00 a.m.65 views

CVE-2018-5972

The CVE corresponds to a SQL injection in Classified Ads CMS Quickad 4.0. Public sources (CNVD-2018-04366, CVE/NVD records, and mirrors) describe exploitation via the listing URI parameters keywords, placeid, cat, or subcat. The root cause is a SQL injection vulnerability in Quickad 4.0 implement...

9.8CVSS9.8AI score0.1915EPSS
SaveExploits5References1Affected Software1
Packet Storm
Packet Storm
added 2018/01/24 12:00 a.m.56 views

Quickad 4.0 SQL Injection

Exploit Title: Classified Ads CMS - Quickad 4.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/quickad-classified-ads-php-script/19960675 Version: 4.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5972...

9.2AI score0.1915EPSS
SaveExploits5
exploitpack
exploitpack
added 2018/01/23 12:00 a.m.54 views

Quickad 4.0 - SQL Injection

Quickad 4.0 - SQL Injection Exploit Title: Classified Ads CMS - Quickad 4.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/quickad-classified-ads-php-script/19960675 Version: 4.0 Category: Webapps Tested on:...

7.5CVSS0.2AI score0.1915EPSS
SaveExploits5
zdt
zdt
added 2018/01/18 12:00 a.m.23 views

D-Link DSL-2640R - Unauthenticated DNS Change Vulnerability

Exploit for hardware platform in category web applications D-Link DSL-2640R Unauthenticated Remote DNS Change Vulnerability Firmware Version: UK1.06 Hardware Version: B1 Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg/ Description: The vulnerability...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2018/01/12 9:36 a.m.17 views

Apps Exposing Children to Porn Ads Booted From Google Play

Sixty app were removed from the Google Play marketplace in December that were infected with malware dubbed AdultSwine that in some cases generated pornographic ads on apps aimed at children. The developers behind the malicious apps also scammed victims with scareware techniques and attempted to...

7.4AI score
SaveExploits0References7
HackRead
HackRead
added 2018/01/08 7:48 p.m.28 views

New adware attack bombard phones & prevent users from disabling ads

By Waqas It is just another day for Android users who are This is a post from HackRead.com Read the original post: New adware attack bombard phones prevent users from disabling ads...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2018/01/08 12:00 a.m.28 views

WordPress Affiliate Ads for Clickbank Products plugin <= 1.6 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Affiliate Ads for Clickbank Products plugin versions = 1.6. It is vulnerable to a Cross-Site Scripting XSS vulnerability via the textadsajax.php bordercolor parameter. Solution Update the WordPress Affiliate Ads for...

6.1CVSS3.1AI score0.01561EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2018/01/04 12:00 a.m.13 views

WordPress Genie Affiliate Ads for Clickbank Products Plugin Cross-Site Scripting Vulnerability

MyCBGenie Affiliate Ads for Clickbank Products plugin is one of the advertisement plugins that are used in WordPress, a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers. MyCBGenie...

6.1CVSS6.7AI score0.01561EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2018/01/03 12:00 a.m.71 views

Joomla Advertisement Board Classifieds 3.2.0 Shell Upload

Title: Advertisement board Joomla classifieds extension 3.2.0 - Remote Shell Upload Vulnerability Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: http://ordasoft.com/advertisement-board-joomla-classifieds-extension Product: 'Advertisement board Joomla classifieds extension 3.2.0'...

7.1AI score
SaveExploits0
Prion
Prion
added 2018/01/01 8:29 a.m.13 views

Code injection

The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the textadsajax.php bordercolor parameter...

4.3CVSS6AI score0.01561EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2018/01/01 8:29 a.m.11 views

CVE-2017-18011

The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the textadsajax.php bordercolor parameter...

6.1CVSS5.8AI score0.01561EPSS
SaveExploits1References3
Rows per page
Query Builder