CVE-2017-5570

An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band...

Oracle E-Business Suite 12.x Unconstrainted File Download Vulnerability

Exploit for windows platform in category remote exploits Exploit Title: Unconstrained File Download - Oracle E-Business Suite Exploit Discoverer: Owais Mehtab, Tayeeb Rana Vendor Homepage: http://www.oracle.com Version: 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 CVE: 2017-3277 Attack Vectors...

Oracle E-Business Suite 12.x Unconstrainted File Download

Exploit Title: Unconstrained File Download - Oracle E-Business Suite Exploit Discoverer: Owais Mehtab, Tayeeb Rana Vendor Homepage: http://www.oracle.com Version: 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 CVE: 2017-3277 Attack Vectors exploitation may be done by sending a post request to following u...

Starbucks: csrf blogs.starbucks.com

We can add comments on any article from the the user's account Request POST /blogs/customer/archive/2016/05/06/starbucks-doubleshot-174-energy-coffee-makes-a-flavorful-foray-into-the-realm-of-spiced-coffee.aspx HTTP/1.1 Host: blogs.starbucks.com User-Agent: Mozilla/5.0 Windows NT 6.2; WOW64;...

QIWI: [XSS/3dsecure.qiwi.com] 3DSecure XSS

При отправке POST запроса: POST https://3dsecure.qiwi.com/acs/pareq?network=VISA HTTP/1.1 Host: 3dsecure.qiwi.com Connection: keep-alive Content-Length: 37 Cache-Control: max-age=0 Origin: https://pay.qiwi.com Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

DirectAdmin 1.50.1 - Denial of Service

DirectAdmin 1.50.1 - Denial of Service @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@...

Cisco Unified Communications Manager Path Traversal Vulnerability

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A security vulnerability exists ...

LocalTapiola: Reflected XSS and Open Redirect in several parameters (viestinta.lahitapiola.fi)

Basic report information Summary: Hi, The values within the ctx tag, are not filtered, they are reflected inside a javascript code in http://viestinta.lahitapiola.fi/webApp/APP3242, which can be exploited to perform an XSS Attack. The parameter are: ctxothersDrivingmagallupcount...

LocalTapiola: Reflected XSS on sankarikoulutus (viestinta.lahitapiola.fi)

Basic report information Summary: Hi, The ctx parameter in http://viestinta.lahitapiola.fi/webApp/sankarikoulutus, can be exploited to perform an XSS Attack. Description: When a user clicks on a map area, The following POST request is generated : POST / HTTP/1.1 Host: viestinta.lahitapiola.fi...

TP-LINK TD-W8151N - Denial of Service

TP-LINK TD-W8151N - Denial of Service Exploit Title: TP-LINK TD-W8151N - Denial of Service Date: 2016-12-13 Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Demo : https://www.youtube.com/watch?v=WrGgHvhiCGg POC : flagFre...

Sungard eTRAKiT3 may be vulnerable to SQL injection

Overview According to the reporter, the Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end database. Description CWE-89: Improper Neutralization of Special Elements us...

WNC01WH vulnerable to directory traversal due to an issue in processing POST request

Overview WNC01WH provided by BUFFALO INC. is a network camera. WNC01WH contains a directory traversal vulnerability due to an issue in processing POST request. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11860)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability by sending a specially crafted POST request to obtai...

CVE-2016-2937

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...

CVE-2016-2937

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...

Design/Logic Flaw

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...

CVE-2016-2937

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...

InvoicePlane 1.4.8 - Password Reset Vulnerability

Exploit for php platform in category web applications Exploit Title: InvoicePlane v1.4.8 Incorrect Access Control for password = reset Date: 12-11-2016 Exploit Author: feedersec Contact: email protected Vendor Homepage: https://invoiceplane.com Software Link:...

Wordpress google-adsense-and-hotel-booking plugin denial of service vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. google-adsense-and-hotel-booking is one of the ads automatically inserted and hotel booking plugin. A denial of service vulnerability exists in the...

Sync Breeze Enterprise Server <= 8.9.24 Buffer Overflow Vulnerability - Active Check

Sync Breeze Enterprise Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...