The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a perpetrator to execute arbitrary commands.

The vulnerability of the debugging functionality of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally,...

The vulnerability of the Cisco Unified Computing System Central device’s centralized management system allows a hacker to redirect users to a malicious web page.

The vulnerability of the web interface of the Cisco Unified Computing System Central management system is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious web page from a remote location...

The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.

The vulnerability of the CLI component of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary...

CVE-2017-2674

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly...

Omegle Clone 2.0 SQL Injection

Title: Omegle Clone 2.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.turnkeycentral.com Vendor URL: http://www.turnkeycentral.com/scripts/omegle-clone/ Product: Omegle Clone 2.0 Google Dork: N/A Product & Service Introduction: "Omegle Clone" Start Your own chat service like Omegle. B...

Omegle Clone - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Omegle Clone - SQL Injection Google Dork: N/A Date: 18.03.2017 Vendor Homepage: http://turnkeycentral.com/ Software: http://www.turnkeycentral.com/scripts/omegle-clone/ Demo: http://demo.turnkeycentral.com/omegleclone/ Version:...

Uber: Open Redirect on central.uber.com allows for account takeover

An error in our OAuth2 flow for central.uber.com allowed an attacker to leverage an open redirect that allowed for a full account takeover. When logging into central.uber.com, the state parameter for login.uber.com contained a redirect location instead of a CSRF token. As a result, an attacker...

DEBIAN-CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

AZL-6940 CVE-2016-9844 affecting package unzip for versions less than 6.0-19

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

AZL-35338 CVE-2016-9844 affecting package unzip for versions less than 6.0-20

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

ALPINE-CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

Buffer overflow

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

UBUNTU-CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

spanishcentral.com XSS vulnerability

Vulnerable URL: http://www.spanishcentral.com/audio?file="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 40459 VIP website status:| Yes Check spanishcentral.com SSL connection:|...

3dcontentcentral.es XSS vulnerability

Vulnerable URL: http://www.3dcontentcentral.es/Search.aspx?arg= h a h h a h a h a h xany is the bestxany says /xss/ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

3dcontentcentral.it XSS vulnerability

Vulnerable URL: http://www.3dcontentcentral.it/Search.aspx?arg= h a h h a h a h a h xany is the bestxany says /xss/ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

X (Formerly Twitter): GNIP subdomain take over

Hello, Your subdomain at blog.gnipcentral.com is not well configured with allows subdomain take over as @fransoren explained in report 145224 . PoC: Go to http://blog.gnipcentral.com/ , you will be redirected to my domain http://testcloudfrontbug.s3-us-west-2.amazonaws.com/asd/index.html Please f...