gi-de-stiftung.org Cross Site Scripting vulnerability OBB-3756093

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SQL Injection Vulnerability in Li Lei's Blog gi***.php Page

Li Lei blog is an open source PHP blog management system . Li Lei blog gi.php page SQL injection vulnerability, an attacker can exploit the vulnerability to obtain sensitive database information...

gi-estate.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3661 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting gi-estate.com website and its users. Following coordinate...

The vulnerability of the __GI_raise function (sig=sig@entry=6) in the qli utility from the firebird2.5-classic-common package allows a attacker to cause a service failure.

Vulnerability of the GIraise function sig=sig@entry=6 ../nptl/sysdeps/unix/sysv/linux/raise.c:64 is related to errors during pointer assignment for zero pointers 0x00007ffff6515875. Exploitation of this vulnerability may allow an attacker to cause a service failure through a specially crafted...

Omron GI-SID1224 Safety IO Module Detection

Binary data 756214.prm...

Yu Gi Oh Number Error Vulnerability

Yu Gi Oh YGO is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of YGO. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

CVE-2018-13167

The mintToken function of a smart contract implementation for Yu Gi Oh YGO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for Yu Gi Oh YGO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13167

The mintToken function of a smart contract implementation for Yu Gi Oh YGO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13168

The CVE-2018-13168 entry concerns a mintToken function in a Yu Gi Oh (YGO) Ethereum token (Contract Name: NetkillerBatchToken) that suffers an integer overflow. The root cause allows the contract owner to set the balance of any user to an arbitrary value. Public references confirm the vulnerabili...

CVE-2018-13167

CVE-2018-13167 affects the Yu Gi Oh (YGO) Ethereum token smart contract. The mintToken function contains an integer overflow vulnerability that allows the contract owner to set an arbitrary user’s balance to any value. The description and CNVD/NVD entries concur on a balance manipulation flaw ste...

Yu-Gi-Oh! BAM Pocket - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yu-Gi-Oh! BAM Pocket published at the 'play' market has multiple vulnerabilities...

Yu-Gi-Oh! Duel Generation - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yu-Gi-Oh! Duel Generation published at the 'play' market has multiple vulnerabilities...

WordPress GI-Media Library Plugin Directory Traversal Vulnerability

This module exploits a directory traversal vulnerability in WordPress Plugin GI-Media Library version 2.2.2, allowing to read arbitrary files from the system with the web server privileges. This module has been tested successfully on GI-Media Library version 2.2.2 with WordPress 4.1.3 on Ubuntu...

GI-Media Library <= 2.2.2 - Arbitrary File Download

The gi-media-library WordPress plugin was affected by an Arbitrary File Download security vulnerability. /wp-content/plugins/gi-media-library/download.php?fileid=Li4vLi4vLi4vd3AtY29uZmlnLnBocA== Where "Li4vLi4vLi4vd3AtY29uZmlnLnBocA==" is "../../../wp-config.php" Base64 encoded...

WordPress GI-Media Library Plugin <= 2.2.2 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

Read Excel Script 1.1 - Shell Upload Vulnerability

No description provided by source. Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Vendor : http://www.bts-gi.net.tc/home.php ======================================= Vuln :...

Mega File Manager 1.0 File Download

Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php' parameter 'name'. PoC :...

Mega File Manager - File Download

Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php' parameter 'name'. PoC :...

Roxio Creator DE DLL Hijacking Exploit (HomeUtils9.dll)

Exploit for windows platform in category local exploits ======================================================= Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll ======================================================= / Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date...