Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain and other core processes, including systemserver,...

Debian: Security Advisory (DLA-838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3480-3: Apport regression

USN-3480-2 fixed regressions in Apport. The update introduced a new regression in the container support. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local...

USN-3480-3 apport regression

USN-3480-2 fixed regressions in Apport. The update introduced a new regression in the container support. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local...

PHP Scripts Mall Advance B2B Script SQL Injection Vulnerability

PHP Scripts Mall Advance B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Advance B2B Script version 2.1.3. A remote attacker can exploit this vulnerability by sending the...

Movie Guide 2.0 - SQL Injection

Exploit Title: Movie Guide 2.0 - SQL Injection Dork: N/A Date: 15.12.2017 Vendor Homepage: http://applebitemedia.com/ Software Link: http://applebitemedia.com/amwdl/AMMovieGuide.tar.gz Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web:...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17586

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17586

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

Sql injection

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...

Sql injection

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

CVE-2017-17586

FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...

PT-2017-14898

Name of the Vulnerable Software and Affected Versions Advance B2B Script version 2.1.3 Description The issue is related to SQL Injection, which can be exploited via the show id parameter in the "tradeshow-list-detail.php" endpoint or the pid parameter in the "view-product.php" endpoint...

PT-2017-14906

Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...

PT-2017-14886

Name of the Vulnerable Software and Affected Versions Realestate Crowdfunding Script version 2.7.2 Description The issue is related to SQL Injection, which occurs via the pid parameter in the "single-cause.php" endpoint. Recommendations For Realestate Crowdfunding Script version 2.7.2, consider...

PT-2017-14881

Name of the Vulnerable Software and Affected Versions FS Olx Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the scat parameter in the "subpage.php" endpoint or the pid parameter in the "message.php" endpoint. Recommendations For FS Olx Clone versio...

CVE-2017-17602: Improper Neutralization of Special Elements used in an SQL Command

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...