cs-cert.unisa.ac.za XSS vulnerability

Vulnerable URL: http://cs-cert.unisa.ac.za/course.htm?coursename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

cs.odu.edu XSS vulnerability

Vulnerable URL: http://www.cs.odu.edu/ibl/csschedule.php?semester=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

WordPress wp-championship plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL. wp-championship is one of the plugins used to play guessing games. A SQL injection vulnerability exists in the...

Yokogawa multiple products stack buffer overflow vulnerability(CVE-2 0 1 5-5 6 2 7)-vulnerability warning-the black bar safety net

Affected system: yokogawa Exaopc = R3. 7 2. 0 0 yokogawa CENTUM CENTUM VP Entry yokogawa CENTUM CENTUM VP yokogawa CENTUM CENTUM CS 3 0 0 0 Entry yokogawa CENTUM CENTUM CS 3 0 0 0 yokogawa CENTUM CENTUM CS 1 0 0 0 Description: CVECAN ID: CVE-2 0 1 5-5 6 2 7 Yokogawa Japan Yokogawa Electric...

Microsoft Office 2007 MSO.dll Arbitrary Free Exploit

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and...

Linux/x86 Memory Sinkhole Proof Of Concept

; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is determined by which register will be read out of the APIC ; fo...

Linux Kernel (x86) - Memory Sinkhole Privilege Escalation

; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is determined by which register will be read out of the APIC ; fo...

Ebay Magento Bug Bounty #17 - CS Cross Site Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 17 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1473 EIBBP-31541 Release Date: ============= 2015-06-14 Vulnerability Laboratory ID VL-ID:...

The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information

The vulnerability of the kernel-pcmcia-cs-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-pcmcia-cs-2.2.24 package of the Red Hat Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The kernel-pcmcia-cs-2.2.19 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

CS-Cart Cross-Site Request Forgery Vulnerability

CS-Cart is a PHP and MySQL based e-commerce software system developed by CS-Cart team. The system supports third-party software extensions, customized promotional strategies, product filtering definitions and more. A cross-site request forgery vulnerability exists in CS-Cart version 4.2.4. A remo...

CVE-2015-2701

Cross-site request forgery CSRF vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/...

CVE-2015-2701

Cross-site request forgery CSRF vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/...

CVE-2015-2701

CVE-2015-2701 describes a CSRF vulnerability in CS-Cart 4.2.4 where an attacker can hijack a user’s authenticated session by crafting a request to profiles-update/ that changes a password. The affected product is CS-Cart 4.2.4; the underlying issue is cross-site request forgery. No explicit fixes...

CS-Cart 4.2.4 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CS-Cart 4.2.4 CSRF Google Dork: intext:"© 2004-2015 Simtech" Date: March 11, 2015 Exploit Author: Luis Santana Vendor Homepage: http://cs-cart.com Software Link:...

CS-Cart 4.2.4 - Cross-Site Request Forgery

CS-Cart 4.2.4 - Cross-Site Request Forgery Exploit Title: CS-Cart 4.2.4 CSRF Google Dork: intext:"© 2004-2015 Simtech" Date: March 11, 2015 Exploit Author: Luis Santana Vendor Homepage: http://cs-cart.com Software Link:...

CS-Cart 4.2.4 - Cross-Site Request Forgery

Exploit Title: CS-Cart 4.2.4 CSRF Google Dork: intext:"© 2004-2015 Simtech" Date: March 11, 2015 Exploit Author: Luis Santana Vendor Homepage: http://cs-cart.com Software Link: https://www.cs-cart.com/index.php?dispatch=pages.gettrial&pageid=297&edition=ultimate Version: 4.2.4 Tested on: Linux +...

PT-2023-4102 · Unknown +1 · Monetdb Server +1

Name of the Vulnerable Software and Affected Versions: MonetDB Server versions 11.45.17 through 11.46.0 Description: The issue in the cs bind ubat component allows attackers to cause a Denial of Service DoS via crafted SQL statements. It is related to incorrect clearance or release of resources,...