The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I lies in the rigid encoding of registration data, which allows a intruder to gain access to the device with administrator rights.

The vulnerability of the ACTi series D, B, E, and I video surveillance camera microprogramming systems is related to the use of a pre-installed administrator account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device with administrator privileges...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

Sql injection

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367

CVE-2018-6367 is a confirmed SQL injection in the Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability is triggered via the /chat_im/chat_window.php with the request_id parameter or via the /search_events.php with the category parameter. The NVD entry reports a CVSS v3.0 base ...

i-spark.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-548979 Description| Value ---|--- Affected Website:| i-spark.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vastal I-Tech Facebook Clone 2.9.9 SQL Injection

Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...

Buddy Zone 2.9.9 - SQL Injection

Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...

Buddy Zone 2.9.9 - SQL Injection

Buddy Zone 2.9.9 - SQL Injection Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

i-cake.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-546818 Description| Value ---|--- Affected Website:| i-cake.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0012) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert 'kernel.spec: Require the new microcodectl.' Brian Maly - xen-blkback: add pendingreq allocation stats Ankur Arora Orabug: 27386890 - xen-blkback: move indirect req allocation out-of-line Ankur...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4017)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4017 advisory. - KVM: x86: Add memory barrier on vmcs field lookup Andrew Honig CVE-2017-5753 - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts Andrew Honig Orabug:...

i-get.gr XSS vulnerability

Open Bug Bounty ID: OBB-533327 Description| Value ---|--- Affected Website:| i-get.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

i-see.in XSS vulnerability

Open Bug Bounty ID: OBB-530825 Description| Value ---|--- Affected Website:| i-see.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mozilla Joins U.S. Attorneys General In Bid to Restore Net Neutrality

Mozilla has joined a coalition of U.S. state attorneys general in battling the Federal Communications Commission’s controversial recent ruling that overturned net neutrality laws. “The internet is a global, public resource,” Mozilla wrote in a blog post. “It relies on the core principle of net...

i-d.vice.cn XSS vulnerability

Open Bug Bounty ID: OBB-483802 Description| Value ---|--- Affected Website:| i-d.vice.cn Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

Debian DLA-1226-1 : wireshark security update

It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and AMQP, which result in denial of dervice or the execution of arbitrary code. For Debian 7 'Wheezy', these problems have been fixed ...

[SECURITY] [DLA 1226-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u8 CVE ID : CVE-2017-11408 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and...

i-online-casinos.com XSS vulnerability

Open Bug Bounty ID: OBB-465740 Description| Value ---|--- Affected Website:| i-online-casinos.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager allows a hacker to execute arbitrary operating system commands.

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager exists because measures to neutralize the special elements used in operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands via...