CVE-2018-18762

SaltOS 3.1 r8126 contains a database download vulnerability...

IBM DB2 Buffer Overflow Vulnerability (CNVD-2019-07259)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A buffer overflow vulnerability exists in IBM DB2 including: DB2 Connect Server based on Linux, UNIX a...

CVE-2018-1980

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154078...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2018-15708

creationtimestamp| type| source ---|---|--- 2019-02-05 08:36:44+00:00| published-proof-of-concept| https://t.me/antichat/3504 2019-06-25 21:32:35+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagiosximagpiedebug.rb 2019-06-26 00:00:00+00:00|...

Joomla Ninja RSS Syndicator 2.0.5 SQL Injection

Exploit Title : Joomla Ninja RSS Syndicator Components 2.0.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : ninjaforge.com Software Download Link : ninjaforge.com/extensions/download/ninja-rss-syndicator Software...

CMSsite 1.0 SQL Injection

Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari [email protected] Date: 2019-01-27 Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1.0 Tested on: Windows 10 CVE: N/A...

SirsiDynix e-Library 3.5.x - Cross-Site Scripting

SirsiDynix e-Library 3.5.x - Cross-Site Scripting Exploit Title: SirsiDynix e-Library = 3.5.x - Cross-Site Scripting CVE: CVE-2018-20503 Date: 2019-24-01 Google Dork: inurl:/x/x/0/49 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: http://www.sirsidynix.c...

SQL Injection Vulnerability in in***.php Page in LaySNS

LaySNS is a lightweight, ThinkPHP+Layui-based integrated website management system that integrates content management and community interaction. LaySNS in.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Shield CMS 2.2 - email SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SHIELD - Freelancer Content Management System 2.2 - SQL Injection / CSRF Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/shield-content-management-system/18833498 Versio...

SQL Injection Vulnerability in Lo***.aspx Page of Integrated Water Supply Management Platform

Wuhan Jinshuilai Technology Development Co., Ltd. is a high-tech enterprise specializing in water management informationization, automation and intelligent construction. There is a SQL injection vulnerability in the Lo.aspx page of the integrated water management platform, which can be exploited ...

CVE-2019-5720

includes/db/class.reflinesdb.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the voidtransaction.php filterType parameter...

CF Image Hosting Script 1.6.5 Privilege Escalation

!/usr/bin/env python """ Exploit Title: CF Image Hosting Script 1.6.5: Delete database Google Dork: "Powered By CF Image Hosting script" Date: 01/08/2019 Exploit Author: David Tavarez Vendor Homepage: https://davidtavarez.github.io/ Software Link:...

Sql injection

Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::userinfo function, which could allow the attacker to view, add, modify or delete information in the back-end database...

CVE-2018-1000630

Battelle V2I Hub 2.5.1 is affected by a SQL injection vulnerability. According to CNVD-2019-03266 and NVD records, a remote attacker with authentication can send crafted SQL via the jtSorting or id parameters to /api/PluginStatusActions.php and /status/pluginStatus.php, enabling viewing, adding, ...

SQL Injection Vulnerability in CCTV Digital Resource Teaching Platform

CCTV digital resource teaching platform is to provide users with online teaching services. SQL injection vulnerability exists in CCTF Digital Resource Teaching Platform. An attacker can exploit the vulnerability to log in to the account system and obtain sensitive information from the database...

CVE-2018-20329

Chamilo LMS version 1.11.8 contains a main/inc/lib/CoursesAndSessionsCatalog.class.php SQL injection, allowing users with access to the sessions catalogue which may optionally be made public to extract and/or modify database information...

Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers

Cybersecurity researchers have discovered a critical vulnerability in widely used SQLite database software that exposes billions of deployments to hackers. Dubbed as 'Magellan ' by Tencent's Blade security team, the newly discovered SQLite flaw could allow remote attackers to execute arbitrary or...

SQL Injection Vulnerability in HuCart aj***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version aj.php page SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain database sensitive information...