538 matches found
CVE-2019-14703: Cross-Site Request Forgery (CSRF)
A CSRF issue was discovered in webparam?user&action=set¶m=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account...
CVE-2017-18458: Improper Input Validation
cPanel before 62.0.17 allows file overwrite when renaming an account SEC-219...
CVE-2013-7473: Cross-Site Request Forgery (CSRF)
Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...
CVE-2019-1010180
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet...
Fedora Update for mingw-qt5-qtwinextras FEDORA-2019-3c45bd2cc3
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-5927: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...
SQL Injection Vulnerability in Xi'an Blue Coast Information Technology Co.
Xi'an Blue Coast Information Technology Ltd. is a professional website construction company. Xi'an Blue Coast Information Technology Co., Ltd. website building system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2018-20638: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory...
CVE-2019-8437: Cross-Site Request Forgery (CSRF)
njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...
CVE-2018-18569: Server-Side Request Forgery (SSRF)
The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests with certain restrictions that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. Th...
PT-2018-15363
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 Description The issue allows for a CSRF attack via the "upload/admin/manager.php?rec=insert" endpoint to add an administrator account. Recommendations For DouPHP version 1.5, consider implementing CSRF protection measures to...
Carbon Black’s Susan An Named to Rev Boston’s 2018 Top 20 Women List
It is a great honor to announce that Rev Boston recently listed Susan An, Senior Director of Corporate Sales at Carbon Black, on its annual ‘Top 20 Women’ list. Susan is part of the fourth cohort of women to be acknowledged by Rev Boston, an event and award recognizing the top women in technology...
CVE-2018-15851: Cross-Site Request Forgery (CSRF)
An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...
CVE-2018-14264
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CloudBees Jenkins Unauthorized Operation Vulnerability (CNVD-2019-24412)
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An...
FTP2FTP 1.0 - Arbitrary File Download
FTP2FTP 1.0 - Arbitrary File Download Exploit Title: FTP2FTP 1.0 - Arbitrary File Download Dork: N/A Date: 18.07.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/ftp2ftp-server-to-server-file-transfer-php-script/21972395 Version: 1.0 Category: Webapps...
Cross site request forgery (csrf)
OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerability can add an account at the admin level via the index.php/manuser/insert URI...
praxis-an-der-lauter.de XSS vulnerability
Open Bug Bounty ID: OBB-637438 Description| Value ---|--- Affected Website:| praxis-an-der-lauter.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...