Apache Solar 5.5.4 / 6.5.1 Member Spoofing Vulnerability

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious...

CVE-2014-7953

Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat'...

CVE-2014-7953

Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat'...

teamchallengehourglass.com XSS vulnerability

Vulnerable URL: http://www.teamchallengehourglass.com/memberGallery.asp?programme=1"...

Niushop open source mall system v1.05 beta 20170622 getMemberExpressAddress method has a SQL injection vulnerability

NiuShop open source mall system, is a PHP open source e-commerce system. Niushop open source mall system v1.05 beta 20170622 getMemberExpressAddress method SQL injection vulnerability. The vulnerability due to the system id parameter does not filter the data submitted by the user , a remote...

b2b.hamsoa.com XSS vulnerability

Vulnerable URL: http://b2b.hamsoa.com/member/login.asp?etcstrmode==1"...

gvfhra.org XSS vulnerability

Open Bug Bounty ID: OBB-254810 Description| Value ---|--- Affected Website:| gvfhra.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

File upload vulnerability in finecms

FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. File upload vulnerability exists in FineCMS. A file upload vulnerability exists in the newajaxupload function in \dayrui\controllers\member\Api.php, which can be exploited by an attacker to construct da...

member-advantage.com XSS vulnerability

Vulnerable URL: http://www.member-advantage.com/login.asp?g=36=351"--!"=/group.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1144452 VIP website status:| No Coordinated...

XSS vulnerability in ourphp

OURPHP is a PHP+MySQL based development of W3C standard building system. There is an xss vulnerability in OurPHP member center, which can be exploited by attackers to obtain administrator cookies...

OurPHP member center xss vulnerability

No description provided by source...

NIUSHOP open source mall system front '/member.php' page there are arbitrary file upload vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NIUSHOP open source mall system front '/member.php' page there are arbitrary file upload vulnerability . As the...

SQL Injection Vulnerability in Member Verification Module of SMiCMS Government Website System

SMi CMS Government Website System is a website system for governments, schools and groups. A SQL injection vulnerability exists in the member authentication module of SMiCMS government website system. Due to insufficient filtering of parameters, an attacker can exploit the vulnerability to execut...

SS-2017-002: Member disclosure in login form

More info at https://www.silverstripe.org/download/security-releases/ss-2017-002/...

S-CMS v3.0 build20170522 exists foreground arbitrary user password reset vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS v3.0 build20170522 /member/membersetpwd.asp page exists in the foreground any user password reset vulnerability, allowing an attacker to use the vulnerability to reset the foreground any user...

S-CMS enterprise website builder system/wapmember/post.asp page O_id parameter exists SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is a SQL injection vulnerability in the Oid parameter of the /wapmember/post.asp page of the S-CMS enterprise website builder system. As the program fails to filter the data submitted by users, it...

congenial.anu.net XSS vulnerability

Vulnerable URL: http://congenial.anu.net/member-login/?=/blog/2015/08/17/ireland-and-relocated-migrants-how-is-ireland-faci/?email=xss%22%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E&%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

Heap Overflow Vulnerability in Citrix NetScaler Gateway (CVE-2017-7219)

After presenting my findings on the Swisscom router at the CybSecConference last year, I started looking for a new product to analyze. I quickly found that it’s possible to download virtual “demo” appliances of Citrix products, so I went on to download a Netscaler VPX, which at the time was at...

CVE-2017-3862

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

Phpcms V9. 6. 0 any file write getshell vulnerability analysis-vulnerability warning-the black bar safety net

1 Introduction: It is said to be one in the underground has been around for half a 0day, which has recently been broke to, in the membership registration page, that this vulnerability without the need to login you can use, or more powerful. 2 vulnerability analysis: Follow up on the registration...