XML External Entity (XXE)

jbpm-designer-backend is vulnerable to XML external entity XXE attacks. The application does not parse XML documents properly, allowing a malicious user to conduct a XML external entity attack...

Security Advisory - A CGI application vulnerability in Some Huawei Products

Some open source software used by Huawei does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

Improper access control

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have...

Monstra CMS 3.0.4 Cross Site Scripting

| | Exploit Title: Monstra cms Cross Site ScriptingXSS | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : http://monstra.org/ | Software Link: https://bitbucket.org/Awilum/monstra/downloads/monstra-3.0.4.zip | Version: 3.0.4 | Date: 2017-11-13 | Category: Webapps | Tested on:...

SQL Injection Vulnerability in MIPCMS ApiAdminUser.php Page

MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...

Ingenious 2.3.0 - Arbitrary File Upload

Exploit Title: Ingenious School Management System 2.3.0 - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://iloveprograming.com/ Software Link: https://www.codester.com/items/4945/ingenious-school-management-system Demo: http://iloveprograming.com/view/login.php Version: N/...

linkconnector.com XSS vulnerability

Vulnerable URL: https://www.linkconnector.com/affiliates/affiliate-application/?cid=x%22%3E%3CsvG%20onLoad=prompt9%3E=149989 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

Lend a Little Loan App Has Arbitrary User Registration Vulnerability

Lend a little with a loan app is an emergency loan platform. There is an arbitrary user registration vulnerability in Lend a Little with Loan APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

CVE-2017-15084

The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22...

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

Lessons Learned from the Equifax Disaster

143 million U.S. consumers, Equifax.com users who may have been affected by the the worst data breach in history are receiving all sorts of advice including a free TrustedID product license from Equifax. But despite numerous public reports about the incident, there are still many important...

ICCallLimousine 1.1 - key SQL Injection

ICCallLimousine 1.1 - key SQL Injection Exploit Title: Car Rental Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/limousine-car-hire-script.html Demo: http://icloudcenter.net/demos/iccalllimousine/...

Job Board Software 1.0 - SQL Injection

Exploit Title: Job Board Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/job-board-software Demo: http://jobsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Breach at Equifax May Impact 143M Americans

Equifax, one of the "big-three" U.S. credit bureaus, said today a data breach at the company may have affected 143 million Americans, jeopardizing consumer Social Security numbers, birth dates, addresses and some driver's license numbers. In a press release today, Equifax NYSE:EFX said it...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...

Denial Of Service (DoS) Through Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks through a memory leak. A malicious user can pass a MAT image file to the application to cause memory leaks, leading to the application running out of memory and crashing it...

SQL injection vulnerability of menuqx[1][6] parameter on roles.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website builder system role.control.mydecms.php page menuqx16 parameter SQL injection vulnerability. Due to the system failing to effectively filter user-submitted dat...

SKEW & CORNERS PHOTO EDITOR - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SKEW & CORNERS PHOTO EDITOR published at the 'play' market has multiple vulnerabilities...

WDTV Live SMP 2.03.20 - Remote Password Reset

WDTV Live SMP Remote Password Reset Vulnerability Date: Jul 14 2017 Author: sw1tch Demo: https://www.sw1tch.net/2017/07/12/wdtv-live-smb-exploit/ Description: A simple remotely exploitable web application vulnerability for the WDTV Live Streaming Media Player and possibly other WDTV systems...

CVE-2017-2820

An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To...