bluecms v1. 6 Sql Injection analysis-vulnerability warning-the black bar safety net

Long time no code audit, take a simple look feel. bluecms is a comparison of the old portal cms, online also has a lot about its vulnerability has not been patched, so the following vulnerability is also not really up to date, just when practicing hand. SQL injectionanalysis First look at the dat...

eClinicalWorks healow@work SQL Injection Vulnerability

eClinicalWorks healow@work is a product for healthcare applications from eClinicalWorks, Inc. that provides a set of platforms for physicians to share health records. An SQL injection vulnerability exists in the EmployeePortalServlet page in eClinicalWorks healow@work version 8.0 build 8. An...

PT-2017-16344 · St. Jude Medical · Merlin@Home

Name of the Vulnerable Software and Affected Versions: St. Jude Medical Merlin@home versions prior to 8.2.2 Description: An issue was discovered where the identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site, Merlin.net, are not verifie...

CVE-2017-2965

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file parsing. Successful exploitation could lead to arbitrary code execution...

Merlin@home Man-in-the-Middle Security Bypass Vulnerability

St.JudeMedicalMerlin@hometransmitter是美国St.JudeMedical公司的一款用于对植入心脏装置的患者进行远程护理管理的产品. A man-in-the-middle security bypass vulnerability exists in Merlin@home. A remote attacker could exploit this vulnerability to access or affect communications between Merlin.net and the transmitter terminal...

at&t and NetGear router information disclosure

No description provided by source...

at(1) Persistence Module

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'at1 Persistence', 'Description' = %q This module achieves persisience by executing payloads via at1. , 'License' = MSFLICENSE, 'Author' = 'Jon Har...

XFINITY Gateway Technicolor DPC3941T Cross Site Request Forgery Vulnerability

XFINITY Gateway Technicolor DPC3941T wifi password changing cross site request forgery proof of concept code. Exploit Title: CSRF XFINITY Gateway product Technicolorpreviously Cisco DPC3941T Exploit Author: Ayushman Dutta Version: dpc3941-P20-18-v303r20421733-160413a-CMCST CVE : CVE-2016-7454 The...

EFF Blasts DEA in Ongoing Secret 'Super Search Engine' Lawsuit

The Electronic Frontier Foundation is accusing the Drug Enforcement Agency of improperly withholding documents in a court case that hopes to reveal details about the government’s controversial surveillance program known as Hemisphere. The EFF, which is suing the DEA as part of a Freedom of...

at-bristol.org.uk XSS vulnerability

Vulnerable URL: https://www.at-bristol.org.uk/education/what-we-offer Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 866235 VIP website status:| No...

thegreatwall.com.cn XSS vulnerability

Vulnerable URL: http://www.thegreatwall.com.cn/wakka/wakka.php?wakka=T%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3EextSearch%3Bphrase%3D%3F%5E%3DE%3EHX%F9%5E/referrers=999999.9+%2F%2FuNiOn%2F%2FaLl+%2 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for...

D-Link ADSL Router DSL-2750E SEA_1.01 Remote File Disclosure

!/bin/sh D-Link ADSL ROUTER DSL-2750E SEA1.01 Remote File Disclosure Modem Name: DSL-2750E Firmware Version: SEA1.01 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not...

secure-qa.paycor.com XSS vulnerability

Vulnerable URL: https://secure-qa.paycor.com/Accounts/Authentication/Signin?l=true%22alert%27OPENBUGBOUNTY%27;%20if%22 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

splunk.com XSS vulnerability

Vulnerable URL: https://www.splunk.com/page/signup/essandbox?pdv==Trial=0∏=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 07.06.2017 Latest check for patch:| 07.06.2017 09:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

openSUSE Security Update : flex / at / libbonobo / etc (openSUSE-2016-1155)

Various packages included vulnerable parsers generated by 'flex'. This update provides a fixed 'flex' package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner bsc990856,...

secteur-sante.univ-grenoble-alpes.fr XSS vulnerability

Vulnerable URL: https://secteur-sante.univ-grenoble-alpes.fr/search/node/%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:56 GMT Vulnerability type:| XSS Vulnerability status:|...

SUSE SLED12 / SLES12 Security Update : flex, at, bogofilter, cyrus-imapd, kdelibs4, libQtWebKit4, libbonobo, mdbtools, netpbm, openslp, sgmltool, virtuoso, libqt5-qtwebkit (SUSE-SU-2016:2397-1)

Various packages included vulnerable parsers generated by 'flex'. This update provides a fixed 'flex' package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner bsc990856,...

tivoliaudio.com XSS vulnerability

Vulnerable URL: https://www.tivoliaudio.com/catalogsearch/result/?cat=0=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

komentare.du.cz XSS vulnerability

Vulnerable URL:...

adventurechile.cl XSS vulnerability

Vulnerable URL: http://www.adventurechile.cl/valleLuna.php?lang=spa" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...