1112 matches found
C-MORE HMI EA9 Weak Cryptography for Passwords Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When transmitting passwords, the...
PT-2020-12421
Name of the Vulnerable Software and Affected Versions C-MORE HMI EA9 Firmware version 6.52 Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the control service,...
C-MORE HMI EA9 EA-HTTP Missing Authentication for Critical Function Remote Code Execution Vulnerability
This vulnerability allows remote attackers to issue commands on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of authentication...
PT-2020-12419
Name of the Vulnerable Software and Affected Versions C-MORE HMI EA9 Firmware version 6.52 Description This issue allows remote attackers to bypass authentication on affected installations. The flaw exists within the authentication mechanism due to insufficient authentication on post-authenticati...
Beijing Perfect Creative Technology Co., Ltd.'s More Beauty APP Has Denial of Service Vulnerability
More beautiful APP a mobile plastic surgery information sharing platform, users through this software can learn about today's plastic surgery market, but also can learn about the cost of various types of plastic surgery. A denial-of-service vulnerability exists in the Beijing Perfect Creative...
DDoS Protection for Networks: Divert Traffic Using More Specific Routing
In our previous blog post, we talked about AS autonomous system prepending, but sometimes a customer might have restrictions that would not allow them to use AS prepending. If the customer owned more than a less specific prefix, for example /23 prefix, they could advertise a more specific route...
WordPress Ajax Load More Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress Ajax Load More Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Wordpress Plugin Ajax Load More '#1' SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in Wordpress plugin Ajax Load More '1'. An attacker can exploit the vulnerability to...
Wordpress Ajax Load More 5.3.1 Plugin - (#1) Authenticated SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '1' Authenticated SQL Injection Exploit Author: SunCSR Sun Cyber Security Research - Nguyen Khang Vendor Homepage: https://connekthq.com/plugins/ajax-load-more/ Software Link:...
Ajax Load More < 5.3.2 - Authenticated SQL Injection
The Ajax Load More WordPress plugin was vulnerable to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5=test. The attacker needs to be authenticated with the editthemeoptions capability, which only administrators have by default. PoC...
Ajax Load More < 5.3.2 - Authenticated SQL Injection
The Ajax Load More WordPress plugin was vulnerable to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5=test. The attacker needs to be authenticated with the editthemeoptions capability, which only administrators have by default...
WordPress Ajax Load More 5.3.1 SQL Injection
Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '1' Authenticated SQL Injection Exploit Author: SunCSR Sun Cyber Security Research - Nguyen Khang Google Dork: N/A Date: 2020-05-18 Vendor Homepage: https://connekthq.com/plugins/ajax-load-more/ Software Link:...
WordPress Ajax Load More plugin <= 5.3.1 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability found by Nguyen Khanh in WordPress Ajax Load More plugin versions = 5.3.1. Solution Update the WordPress Ajax Load More plugin to the latest available version at least 5.3.2...
WordPress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '1' Authenticated SQL Injection Exploit Author: SunCSR Sun Cyber Security Research - Nguyen Khang Google Dork: N/A Date: 2020-05-18 Vendor Homepage: https://connekthq.com/plugins/ajax-load-more/ Software Link:...
mobilityonetransportation.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162912 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Threat actors release Troldesh decryption keys
Update: Kaspersky has updated their ShadeDecryptor tool to include decryption for the keys released by "shade team". You can download the tool and find instructions here. A GitHub user claiming to represent the authors of the Troldesh Ransomware calling themselves the “Shade team” published this...
more-magazin.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1136850 Security Researcher keritzy Helped patch 2026 vulnerabilities Received 5 Coordinated Disclosure badges Received 4 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting more-magazin.de website and...
CVE-2020-6204
The selection query in SAP Treasury and Risk Management Transaction Management EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 returns more records than it should be when selecting and displaying the contract number, leading to Missing...
CVE-2020-6969
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...
Code injection
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...