960 matches found
Reddit hacked: Hackers steal complete copy of old database backup
By Waqas Reddit says the breach took place after hackers intercepted SMS that were supposed to be delivered to employees. The social media giant Reddit has announced that it has suffered a data breach in which attackers hacked into its system and ended up stealing data of its registered users...
Reddit Breach Stems from SMS Two-Factor Authentication Breakdown
Reddit confirmed Wednesday that a hacker broke into its systems and has accessed user data – including email addresses and passwords for accounts. The company said in a post today that the compromise occurred between June 14 and June 18, and it detected the incident on June 19. “We learned that a...
Multiple vulnerabilities in PCWAP mobile PC website information management system
PCWAP cell phone PC website information management system is a set of PC and WAP cell phone version of the website can be achieved in the same back-end management of PHP free open-source cell phone station CMS system. PCWAP cell phone PC website information management system has information...
Event ID 9782 is thrown after successful backup
Challenge During Exchange 2010 application aware backup with "Copy only" option enabled you notice following events in Application event log on Exchange server: Log Name: Application Source: MSExchangeIS Date: 5/10/2018 5:38:39 PM Event ID: 9782 Task Category: Exchange VSS Writer Level: Error...
Sensitive File Disclosure (HTTP)
The script attempts to identify files containing sensitive data at the remote web server. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Rvsitebuilder CMS - Database Backup Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Rvsitebuilder CMS Database Backup Download Exploit Author: Hesam Bazvand Contact: email protected Software Link: http://www.rvsitebuilder.com Version: All Version Tested on: Windows 7 / Kali Linux Category: WebApps Dork :...
Rvsitebuilder CMS - Database Backup Download
Rvsitebuilder CMS - Database Backup Download Exploit Title: Rvsitebuilder CMS Database Backup Download Exploit Author: Hesam Bazvand Contact: [email protected] Software Link: http://www.rvsitebuilder.com Version: All Version Tested on: Windows 7 / Kali Linux Category: WebApps Dork :...
Rvsitebuilder CMS - Database Backup Download
Exploit Title: Rvsitebuilder CMS Database Backup Download Exploit Author: Hesam Bazvand Contact: [email protected] Software Link: http://www.rvsitebuilder.com Version: All Version Tested on: Windows 7 / Kali Linux Category: WebApps Dork : inurl:rvsindex.php & /rvsindex.php?/user/login Explo...
Code Execution Vulnerability in Netnifty CMS v7.3
Netnew CIMS is an intelligent program developed professionally for building personal and corporate websites. A code execution vulnerability exists in Netnifty CMS v7.3, which can be exploited to obtain a webshell due to insufficient filtering of the parameters of the database file to be backed up...
Odoo Database Backup Authentication Vulnerability
Odoo formerly known as OpenERP is an enterprise resource planning ERP and customer relationship management CRM system. The system is developed in Python language with PostgreSQL as the database and includes modules for sales management, inventory management and financial management. A security...
CSRF Vulnerability in DayuCMS
DayuCMS is a marketing-centered CMS system that incorporates search engine algorithms to facilitate businesses and individual webmasters. CSRF vulnerability exists in DayuCMS. An attacker can exploit the vulnerability to complete automatic database backup, further explode the database path and...
File Upload Vulnerability in SEMCMS_ASP_v4.5
SemCMS is an open source foreign trade enterprise website management system, written in vbscript language, combined with iis running, SemCMS is very suitable for foreign trade enterprises, e-commerce Internet use. SemCms ASPv4.5 version of the editor database backup file upload vulnerability ,...
Information disclosure
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/...
CVE-2014-9147
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/...
CVE-2014-9147
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/...
CVE-2014-9147
CVE-2014-9147 affects Fiyo CMS 2.0.1.8. The vulnerability allows remote attackers to obtain sensitive information by directly requesting the database backup file in the ".backup/" path. The NVD entry records a high-severity vector (CVSSv3: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base score 7.5) with...
CVE-2014-9147: Exposure of Sensitive Information to an Unauthorized Actor
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/...
How to delete the Device Entry for a User directly from the SQL Database
For some reason like datacorruption or some null pointers, device information is not getting removed fromthe XenMobile Console. This can be deleted directly from the Database by running the below SQL command. Please take the DB back up before we run the below SQL query First obtain the Device ID...