Subversion 1.6.6/1.6.12 - Code Execution

This is an exploit for the subversion vulnerability published as CVE-2013-2088. Author: GlacierZ0ne [email protected] Exploit Type: Code Execution Access Type: Authenticated Remote Exploit Prerequisites: svn command line client available, subversion server exposes webdav through apache,...

Tencent cloud security suffers from injection bypass vulnerability

Tencent Cloud is a public cloud platform built by Tencent for a wide range of enterprises and individuals; it provides basic cloud computing services such as cloud servers, cloud databases, cloud storage and CDN, as well as industry solutions for games, videos and mobile applications. Tencent clo...

Joomla jVoteSystem 2.56 Component parameter keyword time delay injection vulnerability

No description provided by source...

SQL Injection Vulnerability in the Keyword Parameter of Digital Newspaper System of Joyful Reading Kiosk

Joyful Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. A SQL injection vulnerability exists in the keyword parameter of the Joyfully Reading Kiosk Digital Newspaper System. An attacker can exploit the vulnerability to obtain database information...

keyworddiscovery.com XSS vulnerability

Vulnerable URL: http://www.keyworddiscovery.com/search.html?=%5B%27%27%5D=%5B%27Search+keywords%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:42 GMT Vulnerabili...

The vulnerability of the libpng library, which allows an attacker to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the pngcheckkeyword function in the libpng library arises from the loss of a decimal place value. Exploiting this vulnerability could allow an attacker to compromise the integrity, accessibility, and confidentiality of information by using a space character in the PNG image’s...

libpng: underflow read in png_check_keyword()

Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG...

The vulnerability of the Cisco IOS operating system allows a malicious individual to establish a network connection using the TELNET protocol.

The Cisco IOS operating system of telecommunications equipment does not recognize the keyword “vrf-also” during the execution of the “access-class” command. This allows a malicious intruder to establish a network connection using the TELNET protocol...

The Han Code of College graduate employment system index_archives.php search_keyword parameter SQL injection

No description provided by source...

ottawacity.ca XSS vulnerability

Vulnerable URL: http://www.ottawacity.ca/index.php?keyword=...

comebagshop.com XSS vulnerability

Vulnerable URL: http://comebagshop.com/index.php?keyword=...

edenly.com XSS vulnerability

Vulnerable URL: http://www.edenly.com/bijoux/?keyword='"/alert"openbugbounty"...

CVE-2015-8540

Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG...

NetworkMiner 2.0 - Network Forensic Analysis Tool (NFAT)

NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...

libpng: underflow read in png_check_keyword()

Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG...

libpng: underflow read in png_check_keyword()

Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG...

libpng: underflow read in png_check_keyword()

Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG...

antalis.fi XSS vulnerability

Vulnerable URL: https://www.antalis.fi/business/html/search/keywordSearch.htm?searchText=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

antalis.ro XSS vulnerability

Vulnerable URL: http://www.antalis.ro/business/html/search/keywordSearch.htm?searchText=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Dtcms Search Page Cross-Site Scripting Vulnerability

dtcms is a content management system developed based on c. There is a cross-site scripting vulnerability in the keyword parameter of search.html on the front page of Dtcms, which can be controlled by an attacker to obtain the user's cookie information...