82 matches found
Qnap Qvr缓冲区错误漏洞
Qnap Qvr is a Qnap monitoring system control center from China Welllink Technology Qnap, Inc. A security vulnerability exists in several QVR products, stemming from a stack buffer overflow vulnerability that affects QNAP devices running QVR Elite, QVR Pro, and QVR Guard. An attacker could exploit...
Ibtana < 1.1.4.9 - Subscriber+ Settings Update to Stored XSS
The plugin does not have authorisation and CSRF checks in the ivesavegeneralsettings AJAX action, allowing any authenticated users, such as subscriber to call it and change the plugin's settings which could lead to Stored Cross-Site Scripting issue. Note: v1.1.4.7 added CSRF check, authorisation...
Ibtana < 1.1.4.9 - Subscriber+ Settings Update to Stored XSS
The plugin does not have authorisation and CSRF checks in the ivesavegeneralsettings AJAX action, allowing any authenticated users, such as subscriber to call it and change the plugin's settings which could lead to Stored Cross-Site Scripting issue. Note: v1.1.4.7 added CSRF check, authorisation...
Emlog 跨站脚本漏洞
Emlog is a PHP and MySQL-based blog and content knowledge management system that seeks a fast, stable, simple and comfortable website building experience. a cross-site scripting vulnerability exists in Emlog pro-1.0.7 and prior versions. The vulnerability stems from the fact that Emlog does not...
Download Manager < 3.1.23 - Unauthorised Asset Manager Usage
The majority of the AJAX actions related to the Asset Manager use the same nonce action ie the NONCEKEY constant, and are lacking any authorisation checks. Given that the nonce is available in other pages, accessible by low priviledge users such as author, or even subscribers depending on the...
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
The plugins have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “titletag” parameter. Although the element control lists a fixed set of possible html tags, it is possib...
CVE-2019-9554
In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI...
Custom 404 Pro < 3.2.9 - Authenticated Reflected XSS
The Custom 404 Pro WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability. Version...
QingDao Nature Easy Soft Chanzhi Enterprise Portal System Arbitrary File Read Vulnerability
QingDao Nature Easy Soft Chanzhi Enterprise Portal System a.k.a. chanzhieps is an enterprise portal system for corporate marketing use. The system has built-in features such as articles, products, forums, comments and members. A security vulnerability exists in QingDao Nature Easy Soft Chanzhi...
IJSEO, 3.1.17, SQL Injection
IJSEO from IJoomla, 3.1.17, SQL Injection Resolution: update to 3.1.18 Update notice: https://seo.ijoomla.com/blog/entry/joomla-iseo-extension-got-important-security-fix-1-1 The issue affects both the commercial Pro and the non-commercial Light versions of the extension. The developer released a...
MyDesign Defter 1.7 Database Disclosure
======================================================================== | Title : mydesign defter v1.7 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.7 | Vendor :...
WiFi File Browser Pro v2.0.8 - Code Execution Vulnerability
WiFi File Browser Pro version 2.0.8 suffers from a code execution vulnerability. Product & Service Introduction: =============================== WiFi File Browser allows you to download and upload files to your mobile device by using your favourite web browser without the need of a USB cable. The...
WordPress Users Ultra 1.3.37 SQL Injection
Title : Wordpress Users Ultra Plugin - SQL injection Vulnerability Risk : High+/Critical Author : XroGuE Google Dork : inurl: wp-content/plugins/users-ultra/ Plugin Version : 1.3.37 Plugin Name : users ultra Plugin Download Link : https://downloads.wordpress.org/plugin/users-ultra.zip Vendor Home...
JVN#88313872: ZIP with Pass vulnerable to directory traversal
ZIP with Pass provided by aokitaka contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to...
JVN#44392991: Security File Manager vulnerable to directory traversal
Security File Manager provided by CGENE Inc contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has...
Keller Web Admin CMS 0.94 Pro - Local File Inclusion (2)
@===========================================@ | Author = StAkeR [email protected] | @===========================================@ + + @===========================================@ | Keller Web Admin = Local File Inclusion | @===========================================@ |...
AtomixMP3 2.3 - .pls Local Buffer Overflow
AtomixMP3 2.3 - .pls Local Buffer Overflow 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164...
CWB PRO Version 1.5(INCLUDE_PATH)Remote File Include Vulnerabilites
CWB PRO Version 1.5INCLUDEPATHRemote File Include Vulnerabilites D.Script: http://codewalkers.com/codefiles/373cwbs1.5demo.zip Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/include/clsheadlineprod.php?INCLUDEPATH=Shell...
CWB PRO 1.5 (INCLUDE_PATH) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ CWB PRO 1.5 INCLUDEPATH Remote File Inclusion Vulnerabilities ================================================================ CWB PRO Version 1.5INCLUDEPATHRemote File Inclu...
WonderEdit Pro CMS (template_path) - Remote File Inclusion
WonderEdit Pro CMS templatepath - Remote File Inclusion -------------------------------------------------------------------------------- Title : WonderEdit Pro CMS = Pro version Remote File Include Vulnerabilities Discovered By OLiBekaS...