Joomla Spider Catalog Lite 1.8.10 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Spider Catalog Lite v1.8.10 - SQL Injection Google Dork: inurl:index.php?option=comspidercatalog Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

Joomla! Component Spider Catalog Lite 1.8.10 - SQL Injection

Joomla! Component Spider Catalog Lite 1.8.10 - SQL Injection Exploit Title: Joomla! Component Spider Catalog Lite v1.8.10 - SQL Injection Google Dork: inurl:index.php?option=comspidercatalog Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

Joomla Spider Catalog Lite 1.8.10 SQL Injection

Exploit Title: Joomla! Component Spider Catalog Lite v1.8.10 - SQL Injection Google Dork: inurl:index.php?option=comspidercatalog Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy:...

Selfer Lite - Protect phone - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Selfer Lite - Protect phone published at the 'play' market has multiple vulnerabilities...

Belden Hirschmann GECKO Lite Managed Switch Information Disclosure Vulnerability

Belden Hirschmann GECKO Lite Managed Switch is a switch product from Belden USA. An information disclosure vulnerability exists in Belden Hirschmann GECKO Lite Managed Switch version 2.0.00 and earlier. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2017-5163

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without...

CVE-2017-5161

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element DLL Hijacking vulnerability has been identified. Exploitation of this vulnerability could...

CVE-2017-5161

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element DLL Hijacking vulnerability has been identified. Exploitation of this vulnerability could...

CVE-2017-5163

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without...

Path traversal

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without...

CVE-2017-5163

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without...

CVE-2017-5163

CVE-2017-5163 affects Belden Hirschmann GECKO Lite Managed Switch (version 2.0.00 and earlier). After an administrator downloads a configuration file, a copy containing password hashes can be saved to a location accessible without authentication via path traversal, enabling information disclosure...

CVE-2017-5161

CVE-2017-5161 concerns a DLL hijacking (Uncontrolled Search Path Element) vulnerability in Sielco Sistemi Winlog Lite/Pro SCADA software prior to 3.02.01. The root cause is an uncontrolled search path element that could allow a local attacker to load a malicious DLL and gain the same privileges a...

Sielco Sistemi Winlog Pro/ Winlog Lite DLL Load Local Code Execution Vulnerability

SIELCO SISTEMI Winlog is an application for data acquisition and remote control of SCADA HMI monitoring software. A local code execution vulnerability exists in Sielco Sistemi Winlog Pro and Winlog Lite. An attacker could exploit this vulnerability to execute arbitrary code in the affected...

CMS Lite 1.3.1 - SQL Injection

Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://www.cmslite.co.uk/ Version: 1.3.1 Tested on:...

CMS Lite 1.3.1 - SQL Injection

CMS Lite 1.3.1 - SQL Injection Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo:...

Creative Management System CMS Lite 1.3.1 SQL Injection

Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Demo: http://www.cmslite.co.uk/ Version: 1.3.1 Tested on:...

CMS Lite 1.3.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Creative Management System - CMS Lite v1.3.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.cmslite.co.uk/ Software Buy: https://codecanyon.net/item/creative-management-system-cms-lite/15297597 Dem...

PCSC-Lite: Multiple vulnerabilities

Background PCSC-Lite is a middleware to access a smart card using the SCard API PC/SC. Description The SCardReleaseContext function normally releases resources associated with the given handle including “cardsList” and clients should cease using this handle. However, a malicious client can make t...

GLSA-201702-01 : PCSC-Lite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-01 PCSC-Lite: Multiple vulnerabilities The SCardReleaseContext function normally releases resources associated with the given handle including cardsList and clients should cease using this handle. However, a malicious clien...