PT-2020-5977 · Sap · Sap Netweaver +2

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755 Description: The issue allows an attacker to inject code that can be executed by the application, leading to code injection. This...

ABB Device Library Wizard

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: ABB Equipment: Device Library Wizard Vulnerability: Insecure Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a low-level user to escalate privileges and...

ABB Device Library Wizard Information Disclosure Vulnerability

Library is one of those libraries. A security vulnerability exists in ABB Device Library Wizard versions 6.0.X, 6.0.3.1, and 6.0.3.2. An attacker could exploit the vulnerability to obtain files containing confidential data...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-25846)

NETGEAR R6700 and others are products of NETGEAR, Inc.NETGEAR R6700 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR R6800 is a wireless router.NETGEAR R6800 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products, which can be exploited by an...

WordPress StatTraq 1.3.0 SQL Injection

Exploit Title : WordPress StatTraq 1.3.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2020 Software Download Link : downloads.wordpress.org/plugin/wp-stattraq.zip Software Version : 1.3.0 WordPress Version : 2.6 or higher - 2.8.3 Tested On...

PT-2020-12083 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/import-html.php by adding a question mark ? follow...

Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause downtime or service failures.

The vulnerability of the MySQL Server component’s Security: Encryption module is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL protocol...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2019-40503)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Google Android Kernel component binder driver, which can be exploited by an attacker to elevate privileges...

Joomla SwPhotoGallery 1.5.26 SQL Injection

Exploit Title : Joomla SwPhotoGallery 1.5.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : joomla.org Affected Versions : 1.5.16 and 1.5.26 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

ParantezTeknoloji Library Software 16.0519000 Open Redirection

Exploit Title : ParantezTeknoloji Library Software 16.0519000 Open Redirection Vulnerability Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/10/2019 Vendor Homepage : parantezteknoloji.com.tr Software Affected Versions and Download Links : Koha 3.2000000...

USN-4146-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled unpacking ZIP files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2019-12625 It was discovered that ClamAV incorrectly handled unpacking bzip2 files. A remote attacker could use th...

Information Leakage Vulnerability in Monarch LinkWorks Collaboration Platform

Ltd. is a digital construction platform service provider based on "end+cloud+big data" products/services, providing value-added services such as industrial big data and industrial new finance. An information leakage vulnerability exists in the Dream Dragon LinkWorks collaboration platform. An...

Joomla JomEstate 4.1 SQL Injection

Exploit Title : Joomla 2.5.28 ComJomEstate Real Estate Components 4.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/08/2019 Vendor Homepage : comdev.eu/jomestate Joomla Affected Versions : Joomla 1.5.18 Joomla 1.5.26 - Joomla 1.6 - Joomla 1.7...

Joomla OrgChart 1.0.0 Cross Site Scripting / SQL Injection

Exploit Title : Joomla 1.5.26 ComOrgChart Components 1.0.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : ibrini.com - cmspal.it - altropiano.com - Software Download Link :...

Plexo Torresoft Alex Torres Software 2.0 Cross Site Scripting / SQL Injection

Exploit Title : Plexo Torresoft Alex Torres Software 2.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/08/2019 Vendor Homepage : torresoft.co Software Version : 2.0 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

Koha Library Software 18.1106000 Open Redirection

Exploit Title : Koha Library Software 18.1106000 Tracklinks Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/06/2019 Vendor Homepage : koha.org - koha-community.org Software Download Link : download.koha-community.org...

WordPress Xunjin 4.6 Open Redirection

Exploit Title : WordPress Xunjin Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : xunjinwang.com Theme Affected Version : 4.6 WordPress Affected Version : 4.9.10 Information Link :...

WordPress Jingke 1.0 Open Redirection

Exploit Title : WordPress Jingke Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : hwaq.cc - zmingcx.com WordPress Affected Version : 4.9.x Theme Affected Version : 1.0 Information Link :...

WordPress Aliyun 5.2 Open Redirection

Exploit Title : WordPress Aliyun Themes 5.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : aliyunhelp.com - zmingcx.com Version : WordPress Version 4.9.10 - Theme Version 5.2 Tested On : Windows and Linux Category :...

NIT-Warangal Dispensary Management System India 1.0 Database Disclosure

Exploit Title : NIT-Warangal Dispensary Management System India 1.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 15/04/2019 Vendor Homepage : nitw.ac.in Software Download Link : github.com/NIT-Warangal/DispensaryMS/archive/master.zip Sofwa...