7902 matches found
MapSVG Lite <= 3.2.3 - Cross-Site Request Forgery (CSRF)
CSRF in the mapsvgsave AJAX method...
WordPress MapSVG Lite plugin <= 3.2.3 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Rob Skilling dxw in WordPress MapSVG Lite plugin versions = 3.2.3. Solution Update the WordPress MapSVG Lite plugin to the latest available version at least 3.3.0...
MapSVG Lite <= 3.2.3 - Cross-Site Request Forgery (CSRF)
CSRF in the mapsvgsave AJAX method PoC...
WordPress MapSVG Lite 3.2.3 Cross Site Request Forgery
Details ================ Software: MapSVG Lite Version: 3.2.3 Homepage: https://en-gb.wordpress.org/plugins/mapsvg-lite-interactive-vector-maps/ Advisory report: https://advisories.dxw.com/advisories/csrf-mapsvg-lite/ CVE: Awaiting assignment CVSS: 5.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N Descripti...
Denial of Service Vulnerability in the OSI Layer of the SISCO_MMS_Lite Suite MMS Protocol
MMSLite is a communication component development library based on the IEC61850 standard for substation network communication developed by SISCO, mainly used for Intelligent Electronic Devices IEDs such as Remote Terminal Units RTUs, Automatic Relays, Programmable Logic Controllers PLCs and so on....
Xiaomi Mi A2 Lite and RedMi6 pro Goodix GT9xx Touchscreen Driver Code Issue Vulnerability
The Xiaomi Mi A2 Lite and RedMi6 pro are both smartphones from Chinese company Xiaomi Technology Xiaomi. A code issue vulnerability exists in the Goodix GT9xx touchscreen driver used to customize the Goodix GT9xx in the Xiaomi Mi A2 Lite and RedMi6 pro 2018-08-27 and prior versions. The...
CVE-2018-19939
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...
CVE-2018-19939
The CVE-2018-19939 entry concerns the Goodix GT9xx touchscreen driver used in Xiaomi Mi A2 Lite and RedMi6 pro on custom Linux kernels up to 2018-08-27. Root cause: NULL pointer dereference in kfree following a kmalloc failure in gtp_read_Color within drivers/input/touchscreen/gt917d/gt9xx.c. Imp...
CVE-2018-19939
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...
PT-2018-15175 · Goodix · Goodix Gt9Xx Touchscreen Driver
Name of the Vulnerable Software and Affected Versions: Goodix GT9xx touchscreen driver versions prior to the version that fixes the NULL pointer dereference issue Description: The issue is related to a NULL pointer dereference in the kfree function after a kmalloc failure in the gtp read Color...
WordPress cart66 cart66-lite 1.0 Database Disclosure
Exploit Title : WordPress cart66 cart66-lite Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 03/12/2018 Vendor Homepage : cart66.com wordpress.org/plugins/tags/cart66/ github.com/wp-plugins/cart66-lite Software Download Link ...
Huawei Honor 7A and Honor 9 Lite Information Disclosure Vulnerability
The Huawei Honor 7A and Honor 9 Lite are both smartphone products from the Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Honor 7A prior to version 8.0.0.195C00 and Huawei Honor 9 Lite prior to version 8.0.0.182C01. The vulnerability can be exploited to...
OpenBiz Cubi Lite 3.0.8 - username SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link:...
OpenBiz Cubi Lite 3.0.8 SQL Injection
Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Date: 2018-11-05 Exploit Author: Azkan Mustafa AkkuA AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link: https://sourceforge.net/projects/bigchef/files/latest/download...
OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection
Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Date: 2018-11-05 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link: https://sourceforge.net/projects/bigchef/files/latest/download...
The vulnerability of the monitoring software for PLK Fuji Electric V-Server Lite allows a intruder to execute arbitrary code, trigger malfunctions, or disclose protected information.
The vulnerability of the monitoring software for PLCCs from Fuji Electric, V-Server Lite, is related to buffer overflow in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, cause system failures, or disclose sensitive information...
CVE-2018-10637
A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior...
CVE-2018-10637
CVE-2018-10637 concerns a buffer overflow in Fuji Electric V-Server Lite when parsing the project file (the issue is a classic buffer overflow due to a buffer copy without checking input length, CWE-120). Affected are Fuji Electric V-Server Lite versions 4.0.3.0 and earlier. The vulnerability cou...
