Lucene search
K

173 matches found

OSV
OSV
added 2019/11/20 5:44 p.m.16 views

GHSA-68WG-QV6R-J4VP SQL Injection in usmanhalalit/pixie

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit function due to improper sanitization...

9.8CVSS9.9AI score0.00327EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2019/11/20 5:44 p.m.50 views

SQL Injection in usmanhalalit/pixie

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit function due to improper sanitization...

9.8CVSS4.6AI score0.00327EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2019/11/20 1:28 a.m.14 views

SQL Injection

Pixie is vulnerable to SQL injection. The attack is possible because it does not sanitize the parameter to thelimit function, allowing an attacker to inject and execute malicious SQL script through it...

9.8CVSS3.8AI score0.00327EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2019/11/20 12:0 a.m.1 views

Pixie SQL Injection Vulnerability

Pixie is a PHP-oriented database query generator . A SQL injection vulnerability exists in the limit function in Pixie, which can be exploited by attackers to conduct SQL injection attacks...

9.8CVSS8AI score0.00327EPSS
Exploits1References1
OSV
OSV
added 2019/11/19 8:15 p.m.18 views

CVE-2019-10766

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit function due to improper sanitization...

9.8CVSS9.9AI score
Exploits0References1
NVD
NVD
added 2019/11/19 8:15 p.m.7 views

CVE-2019-10766

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit function due to improper sanitization...

9.8CVSS9.8AI score0.00327EPSS
Exploits1References1
Prion
Prion
added 2019/11/19 8:15 p.m.16 views

Sql injection

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit function due to improper sanitization...

7.5CVSS9.8AI score0.00327EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/11/19 7:17 p.m.13 views

CVE-2019-10766

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit function due to improper sanitization...

9.9AI score0.00327EPSS
Exploits1References1
CVE
CVE
added 2019/11/19 7:17 p.m.74 views

CVE-2019-10766

Summary (CVE-2019-10766) : Pixie, a PHP-oriented database query generator, has a vulnerability in the limit() function due to improper sanitization . Versions affected are Pixie 1.0.x before 1.0.3 and Pixie 2.0.x before 2.0.2 . The provided documents describe this as a SQL injection risk but do n...

9.8CVSS9.8AI score0.00327EPSS
Exploits1References1Affected Software1
Snyk
Snyk
added 2019/10/28 11:44 a.m.1 views

SQL Injection

Overview usmanhalalit/pixie is a lightweight, expressive, framework agnostic query builder for PHP. Affected versions of this package are vulnerable to SQL Injection. The library does not escape the limit param. PoC by Snyk Security Team 'pgsql', 'host' = '127.0.0.1', 'database' = 'postgres',...

9.8CVSS7.5AI score0.00327EPSS
Exploits1References2
Kitploit
Kitploit
added 2018/06/07 2:10 p.m.69 views

Wifite 2.1.0 - Automated Wireless Attack Tool

A complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! What's new in Wifite2? Less bugs Cleaner process management. Does not leave processes running in the background the ol...

7.5AI score
Exploits0References3
NVD
NVD
added 2017/09/25 5:29 p.m.14 views

CVE-2017-12905

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php...

10CVSS9.6AI score0.01725EPSS
Exploits2References1
OSV
OSV
added 2017/09/25 5:29 p.m.1 views

CVE-2017-12905

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php...

10CVSS6AI score
Exploits0References1
Prion
Prion
added 2017/09/25 5:29 p.m.12 views

Server side request forgery (ssrf)

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php...

7.5CVSS9.6AI score0.01725EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2017/09/25 5:0 p.m.11 views

CVE-2017-12905

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php...

9.6AI score0.01725EPSS
Exploits2References1
CVE
CVE
added 2017/09/25 5:0 p.m.52 views

CVE-2017-12905

CVE-2017-12905 affects Vebto Pixie Image Editor versions 1.4 and 1.7, with a Server-Side Request Forgery in Launderer.php triggered by the url parameter. Exploitation allows remote attackers to disclose information or execute arbitrary code. Multiple sources document SSRF in the Launderer.php flo...

10CVSS9.5AI score0.01725EPSS
Exploits2References1Affected Software1
0day.today
0day.today
added 2017/09/23 12:0 a.m.62 views

Pixie Image Editor 1.7 Server-Side Request Forgery Vulnerability

Exploit for php platform in category web applications title: Pixie image Editor SSRF vulnerability for CVE-2017-12905 Date: 20/09/2017 Vulnerability TypePSo SSRFServer Side Request Forgery Vendor of ProductPSo vebtoPS"vebto.comPSc Attack TypePSo Remote ImpactPSo Importent AuthorPSoBeiJing Baimaoh...

7.5CVSS9.2AI score0.01725EPSS
Exploits2
CNVD
CNVD
added 2017/09/22 12:0 a.m.2 views

Vebto Pixie Image Editor Cross-Site Request Forgery Vulnerability

Vebto Pixie Image Editor is an image editor. A cross-site request forgery vulnerability exists in Vebto Pixie Image Editor versions 1.4 and 1.7. A remote attacker can exploit this vulnerability by sending the 'url' parameter to the Launderer.php file to disclose information or execute arbitrary...

10CVSS7.2AI score0.01725EPSS
Exploits2References1
Packet Storm
Packet Storm
added 2017/09/20 12:0 a.m.76 views

Pixie Image Editor 1.7 Server-Side Request Forgery

Pixie image Editor SSRF vulnerability for CVE-2017-12905 title: Pixie image Editor SSRF vulnerability for CVE-2017-12905 Date: 20/09/2017 Vulnerability TypePSo SSRFServer Side Request Forgery Vendor of ProductPSo vebtoPS"vebto.comPSc Attack TypePSo Remote ImpactPSo Importent AuthorPSoBeiJing...

0.2AI score0.01725EPSS
Exploits2
Kitploit
Kitploit
added 2017/09/17 9:30 p.m.25 views

Reaver - Attack against Wi-Fi Protected Setup (WPS)

Reaver has been designed to be a robust and practical attack against Wi-Fi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases. It has been tested against a wide variety of access points and WPS implementations. The original Reaver implements a online brute force attack...

7.3AI score
Exploits0References2
Rows per page
Query Builder