WordPress Page Visit Counter plugin <= 4.0.9 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by ThreatPress Research Team in WordPress Page Visit Counter plugin versions = 4.0.9. Solution Update the WordPress Page Visit Counter plugin to the latest available version at least 4.1...

MITM RDP Connections: Seth

Seth is a tool written in Python and Bash to MitM RDP connections by attempting to downgrade the connection in order to extract clear text credentials. It was developed to raise awareness and educate about the importance of properly configured RDP connections in the context of pentests, workshops...

counter-go.de XSS vulnerability

Open Bug Bounty ID: OBB-608407 Description| Value ---|--- Affected Website:| counter-go.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Windows: Reset account lockout counter after

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winresetaccountlockoutcounter.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Reset account lockout counter after WMI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

The vulnerability of the DHCP server dhcpd arises from the possibility of overflowing the 32-bit link counter, which can lead to a failure in server operation.

The vulnerability of the DHCP server dhcpd arises from the possibility of overflowing the 32-bit link counter. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause the server to fail by sending a large number of specially crafted DCHP requests...

FreeBSD : isc-dhcp -- Multiple vulnerabilities (2040c7f5-1e3a-11e8-8ae9-0050569f0b83)

ISC reports : Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server or an entity masquerading as a server to cause a buffer overflow and resulting crash in dhclient by sending a response containing a specially constructed options section. A malicious...

ISC DHCP Reference Counter Overflow Vulnerability

ISC DHCP is an open source software implementation of the Dynamic Host Configuration Protocol used to connect to IP networks. A reference counter overflow vulnerability exists in ISC DHCP. A remote user can trigger a reference counter overflow by sending a large amount of data to the target serve...

UBUNTU-CVE-2018-5733

A malicious client which is allowed to send very large amounts of traffic billions of packets to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 - 4.1-ESV-R15, 4.2.0 - 4.2.8, 4.3.0 - 4.3.6, 4.4.0...

Arista Networks EOS tcp_input Challenge ACKs Shared Counter Disclosure (SA0023)

The version of Arista Networks EOS running on the remote device is affected by a flaw in the Linux kernel implementation within file net/ipv4/tcpinput.c due to a failure to properly determine the rate of challenge ACK segments. An unauthenticated, remote attacker can exploit this issue to access...

isc-dhcp -- Multiple vulnerabilities

ISC reports: Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server or an entity masquerading as a server to cause a buffer overflow and resulting crash in dhclient by sending a response containing a specially constructed options section. A malicious...

The vulnerability of the Qualcomm GPS operating system for Android, which allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm GPS operating system for Android exists due to insufficient checking of the value of the counter read from the file. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PT-2018-1049 · Isc +5 · Isc Dhcp +5

Name of the Vulnerable Software and Affected Versions: ISC DHCP versions 4.1.0 through 4.1-ESV-R15 ISC DHCP versions 4.2.0 through 4.2.8 ISC DHCP versions 4.3.0 through 4.3.6 ISC DHCP versions 4.4.0 Description: The issue is caused by the potential overflow of a 32-bit reference counter when a...

WordPress responsive-coming-soon-page plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site scriptin...

CVE-2018-5657

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitleicon parameter...

CVE-2018-5662

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...

CVE-2017-13810

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to obtain sensitive information by leveraging an error in packet counters...

isara.cvc.ac.th XSS vulnerability

Open Bug Bounty ID: OBB-390772 Description| Value ---|--- Affected Website:| isara.cvc.ac.th Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

weidichedv.de XSS vulnerability

Open Bug Bounty ID: OBB-390731 Description| Value ---|--- Affected Website:| weidichedv.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Apple macOS High Sierra Kernel Elevation of Privilege Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security vulnerability exists in the packet counter of the Kernel component in Apple macOS High Sierra versions prior to 10.13.1. A local attacker could exploit...

CVE-2015-5533

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpdkeepmonth parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow...