Sql injection

Child Care Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17608

Child Care Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17608

CVE-2017-17608 affects Child Care Script 1.0. It exposes an SQL injection via the /list city parameter, allowing an attacker to inject SQL commands. CVSS data indicates high to critical impact (confidentiality, integrity, and availability). Root cause is unsanitized input in the city parameter. E...

Path traversal

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB mode to encrypt voice traffic between the device and remote server, allowing a malicious user to map encrypted traffic to a particular AES key index and gaining further access to eavesdrop on...

Child Care Script 1.0 - city SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Child Care Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/child-care-script/ Demo:...

Child Care Script 1.0 - city SQL Injection

Child Care Script 1.0 - city SQL Injection Exploit Title: Child Care Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/child-care-script/ Demo: http://ordermanagementscript.com/demo/childcar...

Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique to Achieve Process Injection

Introduction TLS Thread Local Storage callbacks are provided by the Windows operating system to support additional initialization and termination for per-thread data structures. As previously reported, malicious TLS callbacks, as an anti-analysis trick, have been observed for quite some time and...

IoT Devices: The Gift that Keeps on Giving… to Hackers

ARCHIVED STORY IoT Devices: The Gift that Keeps on Giving… to Hackers By Tim Hux · November 16, 2017 McAfee Advanced Threat Research on Most Hackable Gifts You’ve probably noticed the recent increase in Internet connected drones, digital assistants, toys, appliances and other devices hitting the...

httpd: mod_mime buffer overread

A buffer over-read flaw was found in the httpd's modmime module. A user permitted to modify httpd's MIME configuration could use this flaw to cause httpd child process to crash...

httpd: mod_mime buffer overread

A buffer over-read flaw was found in the httpd's modmime module. A user permitted to modify httpd's MIME configuration could use this flaw to cause httpd child process to crash...

httpd: mod_mime buffer overread

A buffer over-read flaw was found in the httpd's modmime module. A user permitted to modify httpd's MIME configuration could use this flaw to cause httpd child process to crash...

DDoS-for-Hire Service Launches Mobile App

In May 2013 KrebsOnSecurity wrote about Ragebooter, a service that paying customers can use to launch powerful distributed denial-of-service DDoS attacks capable of knocking individuals and Web sites offline. The owner of Ragebooter subsequently was convicted in 2016 of possessing child...

Circle with Disney configure.xml Notifications Command Injection Vulnerability(CVE-2017-2917)

Summary An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability. Tested Versions Circle with Disney 2.0...

CentOS 6 : httpd (CESA-2017:2972) (Optionsbleed)

An update for httpd is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

419 scammer offers USD $60 million—and a free child

Scammers often come crawling out of the woodwork in all sorts of places you wouldn't necessarily expect. This is to their advantage when trying to keep suspicion in check; after all, we're pretty much pre-programmed to think 419 scams will only wander into our inboxes. Twitter, though? That's a...

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

CentOS Errata and Security Advisory CESA-2017:2882 An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

The vulnerability of the mod_mime module in the Apache HTTP Server (HTTPD) allows a hacker to cause a malfunction in the child process of HTTPD.

The vulnerability of the modmime module in the Apache HTTP Server HTTPD arises from a buffer overflow during the reading operation. Exploiting this vulnerability allows an attacker to cause a failure in the HTTPD child process by using a specially created malicious Content-Type header...

Ex cop and child porn suspect to remain in jail until he decrypts drives

By Carolina Former Cop and Child Porn Suspect Might Remain in Jail Forever This is a post from HackRead.com Read the original post: Ex cop and child porn suspect to remain in jail until he decrypts drives...

child.pen.go.kr XSS vulnerability

Vulnerable URL: http://child.pen.go.kr/modules/Hansarang/View.Image.php?imagename=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E%C0%FC%C5%EB%B9%B0%C7%B0%B6%B1%BB%ECA%C7%FC.jpg=800=600 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017...