Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint...

GHSA-PWRM-8MVM-P2F2 Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint...

Frontrunning attack via swap token functionality

Handle thankyou Vulnerability details Impact Amun utilizes both Pangolin and Uniswap's Routers to swap tokens within a given pair. One of the router functions used by Amun is swapExactTokensForTokens. Amun provides this function several arguments that the Router contract then utilizes to commence...

CloudBees Jenkins Agiletestware Pangolin Connector for TestRail Plugin Data Modification Vulnerability

CloudBees Jenkins is a set of Java-based development of continuous integration tools from CloudBees, Inc. in the U.S. It is mainly used to monitor continuous software version release/testing projects and some timed tasks.Agiletestware Pangolin Connector for TestRail Plugin is A plugin for uploadi...

CVE-2018-1999032

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint...

Design/Logic Flaw

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint...

CVE-2018-1999032

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint...

CVE-2018-1999032

The CVE-2018-1999032 entry involves Jenkins' Agiletestware Pangolin Connector for TestRail Plugin (version 2.1 and earlier). The vulnerability resides in GlobalConfig.java and can be triggered by an attacker with Overall/Read permission via crafted HTTP requests to an unprotected endpoint to over...

CVE-2018-1999032

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint...

Wordpess Simple Photo Gallery 1.7.8 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpess Simple Photo Gallery Blind SQL Injection Date: 12-05-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/simple-photo-gallery/ Version: 1.7.8 Tested on: Apache 2.2.22, PHP 5.3.10 OSVDB ID :...

Pangolin Automated SQL Injection tool

Pangolin is an automated SQL Injection tool. Remote attackers can use Pangolin to fetch data from the database and execute SQL statements...

oykX blog background post injection 0day-vulnerability warning-the black bar safety net

In the black bar safety net search oykX turned out to confiscate recorded this 0day Into http://zhouxiang. psdzj. com/admin/index. aspx In the account input box at the fill 1 2 3'Or 1=1 and '1'='1 Password is blank, also can be messy to fill, and click on the Login prompt for password error The...

Pangolin 3.2.3 - Automatic SQL injection penetration testing tool New Release !

Pangolin 3.2.3 - Automatic SQL injection penetration testing tool New Release ! Pangolin is an automatic SQL injection penetration testing Pen-testing tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications...

Pangolin v3.2.3 Released, Download Now !

Pangolin v3.2.3 Released, Download Now ! "Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL...

W78CMS enterprise website management system v2. 6. 1 injection-vulnerability warning-the black bar safety net

Author: Lan3a Keywords: inurl:ShowDownload. asp? id= In the admin directory, addjs. the asp file. Not to do any treatment directly query the database. !-- include file="../conn. asp" - % set js = server. CreateObject"ADODB. RecordSet" sql="select from ad where id="& request. QueryString"id" set j...

Easy and sun Shopping Mall v1. 4Cookies injection vulnerability-vulnerability warning-the black bar safety net

Easy and sun Shopping Mall v1. 4Cookies injection vulnerability This injection vulnerability seems to occur in the Home Shopping system. Looks like the network fun. The problem occurs in getpwd4. asp page. See the code: % username=request"username" passwd=md5trimrequest. form"passwd",1 6 set...