Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15619)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the set DNS method in Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15871)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setCleaner method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15624)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setpassphrase method of Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15865)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the 'Logon' method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute arbitrary commands via the 'Password' paramete...

PT-2018-6052 · Github · Uri.Js

Name of the Vulnerable Software and Affected Versions: uri-js versions 2.1.1 and earlier Description: The issue arises from a regular expression used by uri-js to validate URLs, which is vulnerable to redos. This vulnerability causes the program to hang and results in 100% CPU usage when attempti...

Command injection

The '/common/ajaxemailconnectiontest.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute arbitrary commands on the system. This script is vulnerable to command injection via the unsanitized user input 'TESTSERVER'...

GSA Bounty: Multiple Bugs in api.data.gov/signup endpoint leads to send custom messages to Anyone

Hey there, while signing for new api key, i have found two bugs that is unusual and make anyone to send crafted or customised email to someone. Bug 1: - low 1. Go to https://api.data.gov/signup/ 2. Enter first and last name , then enter email id and get api key. Bug: You can use the same email id...

New ownerAnyone Bug Allows For Anyone to ''Own'' Certain ERC20-Based Smart Contracts (CVE-2018-10705)

This morning, our vulnerability-scanning system at PeckShield identified a new vulnerability named ownerAnyone in certain ERC20-based smart contracts such as AURA, which is deployed by a decentralized banking and finance platform – AURORA. This bug, if successfully exploited, might introduce the...

Microsoft Edge Chakra - EntrySimpleObjectSlotGetter Type Confusion

/ function optw, arr arr0 = 1.1; let res = w.event; arr0 = 2.3023e-320; return res; let arr = 1.1; for let i = 0; i ::EntrySimpleObjectSlotGetter 00007fffd5cf3d50 // w.event 000001a880001235 48ffd0 call rax 000001a880001238 488b8e30bdf0ff mov rcx,qword ptr rsi-0F42D0h 000001a88000123f f2480f10415...

Cross site scripting

i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user input is assumed to be escaped, but i...

CVE-2017-16010

CVE-2017-16010 : In i18next, if you call init with interpolation options and do not set escapeValue, the value defaults to undefined, causing user input to be unescaped and enabling cross-site scripting. Affected: i18next 2.0.0 and later. Exploitation details and proof-of-concept are described in...

CVE-2017-16010

Removed by vendor...

PT-2018-3142 · Python +6 · Python +6

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.7.15 Python versions prior to 3.4.9 Python versions prior to 3.5.6rc1 Python versions prior to 3.6.5rc1 Python versions prior to 3.7.0 Description: The issue is related to catastrophic backtracking in the apop metho...

Listing Hub CMS 1.0 SQL Injection

Exploit Title: Listing Hub CMS 1.0 - Multiple SQL Injection Dork: N/A Date: 27.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage: https://codecanyon.net/item/listing-hub-cms-directory-listings-theme/21361294 Version: 1.0 Category: Webapps Tested on: Kali linux Description : An...

Microsoft Edge Chakra - Cross Context Use-After-Free

Microsoft Edge Chakra - Cross Context Use-After-Free f.onload = null; // Garbage collection for let i = 0; i 10; i++ new ArrayBuffer1024 1024 40; let obj = opt; // "opt" returns the freed string constant. ; // Closing the diffrent context f.src = 'about:blank'; But in fact, if you run the code, y...

SQL Injection Discovery Tool: SleuthQL

SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers into each parameter where the SQL-esque variables were identified. SleuthQL aims to augment an assessor’s ability to discover SQL injection...

CVE-2018-5487

NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation JMX RMI service bound to the network, and are susceptible to unauthenticated remote code execution...

Deserialization vulnerability in TP-Link EAP Controller for linux

TP-Link EAP Controller is a software for remote control of wireless AP access point devices from China P&L TP-LINK. A deserialization vulnerability exists in TP-Link EAP Controller for linux. A remote attacker can implement a deserialization attack via the RMI protocol, and a successful attack ca...

ASP.NET jVideo Kit - 'query' SQL Injection

Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection Dork: N/A Date: 23.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: MediaSoft Pro Vendor Homepage: https://www.mediasoftpro.com/video-sharing-script/mvc/ Version: v1.0 Category: Webapps Tested on: Kali linux Description : The...

Joomla! 3.7.0 < 3.7.1 fields.php getListQuery() Method SQLi

The Joomla! installation running on the remote web server is affected by a SQL injection vulnerability in the fields.php script due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database,...