Ctrip Apollo Server-Side Request Forgery Vulnerability

Ctrip Apollo is a distributed configuration center system from China Ctrip Ctrip. The product is mainly used to centralize the management of the configuration of different environments and clusters of the application. A server-side request forgery vulnerability exists in Ctrip Apollo 1.4.0-SNAPSH...

CVE-2019-10686

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...

Server side request forgery (ssrf)

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...

CVE-2019-10686

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...

CVE-2019-10686

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...

CVE-2019-10686

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...

SQL Injection Vulnerability in Website Building System of Guangzhou Ju Teng Information Technology Co.

Guangzhou Ju Teng Information Technology Co., Ltd. specializes in website planning, production, promotion and network system development. Guangzhou Ju Teng Information Technology Co., Ltd. station building system there are SQL injection vulnerabilities, the attacker to take advantage of the...

SQL injection vulnerability in My***.aspx file in the background of Qixing intranet OA system

Qixing OA system formerly Qixing Portal system contains news, notifications, documents, gallery and process form content. A SQL injection vulnerability exists in the My.aspx file in the background of the Qixing Intranet OA System, which can be exploited by attackers to manipulate the database...

SQL injection vulnerability in Us***_Ro***.aspx file in the background of Qixing intranet OA system.

Qixing OA system formerly Qixing Portal system contains news, notifications, documents, gallery and process form content. A SQL injection vulnerability exists in the backend of Qixing Intranet OA System, which can be exploited by attackers to manipulate the database...

Ectouch wx***.php plugin suffers from XML external entity injection vulnerability

ECTouch is a mobile mall online store system launched by Shanghai Shangchuang Network Technology Co. An XML external entity injection vulnerability exists in the Ectouch wx.php plugin. An attacker can exploit this vulnerability to read arbitrary files, execute commands and attack the intranet...

Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin)

Precurio Intranet Portal 2.0 - Cross-Site Request Forgery Add Admin Exploit Title: Precurio Intranet Portal 2.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-12 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.precurio.org Software Link:...

Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Precurio Intranet Portal 2.0 - Cross-Site Request Forgery Add Admin Exploit Author: Ihsan Sencan Vendor Homepage: http://www.precurio.org Software Link:...

Precurio Intranet Portal 2.0 Cross Site Request Forgery

Exploit Title: Precurio Intranet Portal 2.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-12 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.precurio.org Software Link: https://netcologne.dl.sourceforge.net/project/precurio/version%202.1/precurio.zip Version: 2.0 Categor...

Precurio Intranet Portal 2.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Precurio Intranet Portal 2.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-12 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.precurio.org Software Link: https://netcologne.dl.sourceforge.net/project/precurio/version%202.1/precurio.zip Version: 2.0 Categor...

CVE-2018-19244

An XML External Entity XXE vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked...

Xxe

An XML External Entity XXE vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked...

CVE-2018-19244

An XML External Entity XXE vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked...

CVE-2018-19244

The CVE-2018-19244 entry details an XML External Entity (XXE) vulnerability in Charles 4.2.7 within the import/export setup option. According to the provided sources, if a user imports a malicious or attacker-supplied Charles Settings.xml, an intranet network may be accessed and information may b...

intranet.swinhovegroep.nl XSS vulnerability

Open Bug Bounty ID: OBB-695183 Description| Value ---|--- Affected Website:| intranet.swinhovegroep.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score...

CVE-2018-18320

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote co...