SQL Injection Vulnerability in Ocean CMS zyapi.php Page

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the Ocean CMS zyapi.php page. The lack of filtering of the '$ids' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

Through AWS, Google Cloud and Digital Ocean DNS vulnerability take over nearly 12 million domain names-bug warning-the black bar safety net

Shortly before, I was at cloud hosting provider Digital Ocean domain into the system found a security vulnerability, an attacker or may exploit this vulnerability to take over two million of the plurality of domain names in the report of the transfer gate on. If you have not read this report whil...

The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean

Recently, I found that Digital Ocean suffered from a security vulnerability in their domain import system which allowed for the takeover of 20K domain names. If you haven't given that post a read I recommend doing so before going through this write up. Originally I had assumed that this issue was...

Stored XSS cross-site scripting vulnerability in Ocean CMS version 6.33 (CNVD-2016-10763)

Ocean CMS is an open source website builder. Ocean CMS 6.33 version exists stored XSS cross-site scripting vulnerability. A stored XSS cross-site scripting vulnerability exists in Ocean CMS version 6.33. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

Stored XSS Cross-Site Scripting Vulnerability in Ocean CMS Version 6.33

Ocean CMS is an open source website builder. A stored XSS cross-site scripting vulnerability exists in Ocean CMS version 6.33. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

Ocean CMS V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net

t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPage function area parameters after...

Ocean CMS to the latest version V6. 2 8 command execution 0DAY-vulnerability warning-the black bar safety net

t00ls a friend fuzz out of a 0day, but the analysis does not come out what's the problem, I analyze a bit. I is how to track this 0day? In fact, as long as the chase area parameters of the treated place. After a character is an illegal judgment, call echoSearchPagefunction area parameters after t...

Ocean CMS uid parameter has SQL injection vulnerability

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the uid parameter of the Ocean CMS i.php page. Attackers can use the vulnerability to obtain sensitive information in the website database...

Ocean DevGroup detalle-proyecto.php parameter id SQL injection vulnerability

No description provided by source...

oceanexplorations.com XSS vulnerability

Vulnerable URL: http://oceanexplorations.com/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at 16.07.2016 Latest check for patch:| 16.07.2016 05:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Ocean - Puzzles Games for Kids - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Ocean - Puzzles Games for Kids published at the 'play' market has multiple vulnerabilities...

Ocean Fish Scratch & Color - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Ocean Fish Scratch & Color published at the 'play' market has multiple vulnerabilities...

Kids game - Ocean bubbles pop - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids game - Ocean bubbles pop published at the 'play' market has multiple vulnerabilities...

Ocean Mania - Spring Break - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Ocean Mania - Spring Break published at the 'play' market has multiple vulnerabilities...

Ocean Princess - Mermaid Salon - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ocean Princess - Mermaid Salon published at the 'play' market has multiple vulnerabilities...

Ocean Lord - slot - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Ocean Lord - slot published at the 'play' market has multiple vulnerabilities...

Lord of Ocean slot - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lord of Ocean slot published at the 'play' market has multiple vulnerabilities...

Bubbles Ocean Worlds Legend - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bubbles Ocean Worlds Legend published at the 'play' market has multiple vulnerabilities...

3D Ocean Theme - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application 3D Ocean Theme published at the 'play' market has multiple vulnerabilities...

Ocean Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Ocean Live Wallpaper published at the 'play' market has multiple vulnerabilities...