News PHP SQL Injection Vulnerability

News PHP is a script that includes admin panel management and author management. News PHP suffers from a SQL injection vulnerability. An attacker could use this vulnerability to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

OpenDaylight Controller SQL Injection Vulnerability

Opendaylight, a project of the Linux Foundation in the United States, is a community-driven open source software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly.Controller is one of the controllers. An SQL...

PT-2018-16029 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.60 and prior Oracle MySQL versions 5.6.40 and prior Oracle MySQL versions 5.7.22 and prior Oracle MySQL versions 8.0.11 and prior Description: The issue allows a high privileged attacker with network access via...

Information disclosure

Ruckus SmartZone formerly Virtual SmartCell Gateway or vSCG 3.5.0, 3.5.1, 3.6.0, and 3.6.1 Essentials and High Scale on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote attackers to obtain sensitive information or modify data...

CVE-2018-11036

Ruckus SmartZone formerly Virtual SmartCell Gateway or vSCG 3.5.0, 3.5.1, 3.6.0, and 3.6.1 Essentials and High Scale on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote attackers to obtain sensitive information or modify data...

OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Wecodex Hotel CMS 1.0 - Admin Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Hotel CMS 1.0 - 'Admin Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/hotel-management-system-in-php-and-mysql/7 Version: 1.0...

Wecodex Restaurant CMS 1.0 - Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Categor...

PHP Dashboards 4.5 SQL Injection

Exploit 1 of 2: Exploit Title: PHP Dashboards v4.5 - Registration Page SQL Injection Dork: N/A Date: 23.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Version: v4.5 Category: Webapps Tested...

Apache ZooKeeper Security Bypass Vulnerability

Apache Zookeeper is a software project of the U.S. Apache Apache Software Foundation, which can provide open source distributed configuration services, synchronization services and naming registry for large-scale distributed computing. A security vulnerability exists in Apache ZooKeeper versions...

CVE-2018-11096

Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the target's account information remotely...

SAP NetWeaver suffers from unspecified SQL injection vulnerability (CNVD-2018-14849)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. SAP NetWeaver suffers from an unspecified SQL injection vulnerability that arises from failure to adequately...

OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Basic Component Unauthorized Operation Vulnerability (CNVD-2018-10744)

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation that combines core banking, online banking, and estate management.Financial Services Basel Regulatory Capital Basic is one of the Basel-based capital adequacy management component. A security...

Oracle Hospitality Applications Hospitality Reporting and Analytics Component Unauthorized Operation Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Oracle Financial Services Applications FLEXCUBE Core Banking Component Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a set of Oracle's core banking, online banking and property management financial services software. FLEXCUBE Core Banking is one of the core banking components. A security vulnerability exists in the Securities subcomponent of the FLEXCUBE Core Banking...

Oracle Adaptive Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Adaptive Access Manager is one of the authentication components. A security...

Oracle Banking Corporate Lending Component Remote Vulnerability

Oracle Financial Services Applications is the United States Oracle Oracle company's set of core banking, online banking and property management in one of the financial services software. Banking Corporate Lending is one of the bank loan management components. A security vulnerability exists in th...

Oracle Access Manager Component Remote Vulnerability (CNVD-2018-09094)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Access Manager is one of the components that provides identity management,...

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...