4543 matches found
CVE-2018-9986
In Zulip Server versions before 1.7.2, there were XSS issues with the frontend markdown processor...
ShopsN v2.2.6 SQL Injection Vulnerability on Frontend Page
ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the front page of ShopsN v2.2.6 official...
The Firmware Analysis and Comparison Tool: FACT
The Firmware Analysis and Comparison Tool formerly known as Fraunhofer’s Firmware Analysis Framework FAF is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analysis. Additionally, it can compare several images or single files...
SQL Injection Vulnerability in Frontend of gxlcmsqy System
GxlcmsQY system is a simple program tailored for business users. A SQL injection vulnerability exists in the frontend of the gxlcmsqy system. An attacker can exploit this vulnerability to obtain sensitive database information...
File upload vulnerability in kjcms frontend
kjcms is an internet and mobile internet based food ordering service reservation system. A file upload vulnerability exists in the kjcms frontend. The vulnerability is caused due to the upload file type and suffix can be controlled by the user, allowing an attacker to upload a webshell and gain...
DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability
DuomiCms is a video-on-demand system designed for film and television station owners. DuomiCms x3.0 frontend duomiphp/ajax.php file has SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
ask2 Q&A system front user.php file exists arbitrary user password change vulnerability
ask2 Q&A is an open source PHP Q&A program. There is an arbitrary user password change vulnerability in the ask2 Q&A System frontend user.php file. An attacker can exploit the vulnerability to directly modify the password of the administrator user...
SQL Injection Vulnerability in DuomiCms x3.0 Frontend
DuomiCms is a video-on-demand system designed for film and television station owners. SQL injection vulnerability exists in DuomiCms x3.0 frontend. An attacker can exploit the vulnerability to obtain sensitive database information...
File upload vulnerability in ask2 Q&A frontend
ask2 Q&A is an open source PHP Q&A program. A file upload vulnerability exists in the frontend of ask2 Q&A System. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Cross-Site Scripting Vulnerability in EasySNS V1.6 Frontend
ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of cross-site scripting vulnerabilities, attackers ca...
EduaskCMS v1.0.7 Cross-site Scripting Vulnerability in Frontend
EduaskCMS is a free and open source content management system based on ThinkPHP 5.0.14+layui2.2.5 framework. EduaskCMS v1.0.7 frontend has a cross-site scripting vulnerability in the program implementation, the vulnerability is due to the system fails to adequately filter the incoming parameters...
Prithvi - A Report Generation Tool For Security Assessment
A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3. We can...
[SECURITY] Fedora 27 Update: irssi-1.0.7-1.fc27
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
[SECURITY] Fedora 26 Update: irssi-1.0.7-1.fc26
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
Joomla! Component CheckList 1.1.1 - SQL Injection
Exploit Title: Joomla! Component CheckList 1.1.1 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://www.joomplace.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/personal-life/checklist/ Version: 1.1.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...
Reflective Cross-site Scripting Vulnerability in YUNUCMS v1.0.6 Frontend
YUNUCMS is a three-network, open source content management system with its own substation system. A reflective cross-site scripting vulnerability exists in the frontend of YUNUCMS v1.0.6. The attacker constructs XSS statements and performs pop-up box operations to obtain user cookies and other...
The vulnerability of the dvb_frontend_free function (drivers/media/dvb-core/dvb_frontend.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.
The vulnerability of the dvbfrontendfree function located in the drivers/media/dvb-core/dvbfrontend.c file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating locally, to cause service failures or other effects...
