622 matches found
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
PT-2018-15155 · Razorcms · Razorcms
Name of the Vulnerable Software and Affected Versions: razorCMS version 3.4.8 Description: The issue is related to HTML injection in the software. It can be exploited via the "//page" API endpoint, specifically through the keywords parameter. Recommendations: For razorCMS version 3.4.8, consider...
CVE-2018-20572
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...
Here is a list of top 25 worst passwords of 2018
By Waqas SplashData, Inc. a leading password management application developer including SplashID has released a list of the 100 worst passwords of 2018. The company established the ranking after evaluating more than 5 million keywords leaked on the Internet this year. Their findings highlight the...
CVE-2018-18739
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...
CVE-2018-18739
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...
Cross site scripting
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...
SEMCMS Cross-Site Scripting Vulnerability (CNVD-2019-01724)
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by remote attackers to inject arbitrary Web script or HTML into the Keywords field of the...
CVE-2018-18739
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...
sLoad Banking Trojan Downloader Displays Sophisticated Recon and Targeting
A new PowerShell downloader dubbed sLoad is making the rounds, sporting impressive reconnaissance tactics and a penchant for geofencing, which indicate increasing sophistication when it comes to targeting efforts. First spotted in May 2018, sLoad typically delivers the Ramnit banking trojan but h...
PT-2018-13581 · Php Scripts Mall · Php Scripts Mall Website Seller Script
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Website Seller Script version 2.0.5 Description: The issue concerns a cross-site scripting XSS problem. XSS is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website, potentiall...
CVE-2018-3957
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...
CVE-2018-3957
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...
Design/Logic Flaw
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...
CVE-2018-3957
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A use-after-free condition can occur when accessing the Keywords property of the this.info object. An attacker needs to trick the user to open the malicious file to trigger this...
PT-2018-16340 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 9.1.0.5096 Description: A use-after-free issue exists in the JavaScript engine. This occurs when accessing the Keywords property of the this.info object. An attacker can exploit this by tricking a user into opening a...
razorCMS Settings Component Cross-Site Scripting Vulnerability
razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. A cross-site scripting vulnerability exists in the Settings component of razorCMS version 3.4.7, which can be exploited by a remote attacker to...