WordPress wawp_framework 1.0 Database Backup Disclosure

Exploit Title : WordPress wawpframework Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepages : wordpress.org cryonix.cz webarts.name Tested On : Windows and Linux Category :...

WordPress Universal Post Manager 1.5.0 Database Disclosure

Exploit Title : WordPress universal-post-manager 1.5.0 Plugins Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/11/2018 Vendor Homepage : wordpress.org/support/plugin/universal-post-manager/...

Joomla MacGallery Database Disclosure

Exploit Title : Joomla commacgallery Components Apptha Install-Uninstall Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 19/11/2018 Vendor Homepage : joomla.org...

Mozilla: Integer overflow in SSSE3 scaler

An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 SSSE3 scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...

UBUNTU-CVE-2018-12363

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affec...

Cross-Site Scripting in the Management Web Interface

A persistent cross-site scripting XSS vulnerability exists in the management web interface ref PAN-66838 / CVE-2017-5584. PAN-OS contains a post-authentication vulnerability that may allow for a persistent cross-site scripting XSS attack of the management web interface. Successful exploitation of...

flash-plugin: multiple code execution issues fixed in APSB16-37

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7860

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libopenssl100-32bit package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Prestashop 1.5.5 CRLF Injection

Exploit Title: Prestashop v1.5.5 - CRLF Injection Vulnerability Official site: http://www.prestashop.com Official Demo : http://demo-store.prestashop.com/ Risk Level: Medium Exploit Author: Esac Homepage author : www.iss4m.ma Email author : [email protected] Last Checked: 06/09/2013 +----------+ ...

Monstra CMS 1.2.1 - Multiple HTML Injection Vulnerabilities

Monstra CMS 1.2.1 - Multiple HTML Injection Vulnerabilities Monstra 1.2.1 Multiple HTML Injection Vulnerabilities alert1;' / alert2;' / input type="hidden" name="csrf" value="a7de775dce681ae31b7e89...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...

phpWebSite 0.8.2/0.8.3 - 'article.php?sid' SQL Injection

source: https://www.securityfocus.com/bid/17150/info phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

[SA15079] Nag Parent Frame Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Nag Parent Frame Page Title Cross-Site Scripting...

Active Auction House - default.asp Multiple SQL Injections

Active Auction House - default.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/13032/info Active Auction House is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input befo...

queue buffer overflow

No description provided...

Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords ================================================================= Revision 1.0: FINAL For Public...

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution source: https://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application...

[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 584-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2004 http://www.debian.org/security/faq -...

Debian DSA-071-1 : fetchmail - memory corruption

Salvatore Sanfilippo found two remotely exploitable problems infetchmail while doing a security audit. In both the IMAP code and the POP3 code, the input isn't verified even though it's used to store a number in an array. Since no bounds checking is done this can be used by an attacker to write...