tomcat: system property disclosure

It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...

Debian DLA-840-1 : libplist security update

Several vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause an application to crash by triggering a heap-based buffer overflow and memory allocation error in the plistfrombin...

Pornhub: http://ht.pornhub.com/ stored XSS in widget stylesheet

The researcher discovered a way to include JavaScript content through the CSS editor by leveraging the expression dynamic property...

Joomla OS Property component 'catIds' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'catIds' parameter of the Joomla OS Property component, which allows remote, unauthenticated attackers to execute arbitrary SQL commands via the catIds parameter...

Joomla OS Property 3.0.8 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...

Joomla OS Property 3.0.8 SQL Injection

Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy: https://www.joomdonation.com/joomla-extensions/os-property-joomla-real-estate.html Demo:...

Joomla! Component OS Property 3.0.8 - SQL Injection

Joomla! Component OS Property 3.0.8 - SQL Injection Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...

Joomla! Component OS Property 3.0.8 - SQL Injection

Exploit Title: Joomla! Component OS Property v3.0.8 - SQL Injection Google Dork: inurl:index.php?option=comosproperty Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy: https://www.joomdonation.com/joomla-extensions/os-property-joomla-real-estate.html Demo:...

Joomla JE Property Finder 1.6.3 SQL Injection

Exploit Title: Joomla! Component JE Property Finder 1.6.3 - SQL Injection Google Dork: inurl:index.php?option=comjepropertyfinder Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla JE Property Finder 1.6.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Property Finder 1.6.3 - SQL Injection Google Dork: inurl:index.php?option=comjepropertyfinder Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

JE Property Finder, 1.6.3

JE Property Finder,1.6.3,SQL Injection...

Joomla! Component JE Property Finder 1.6.3 - SQL Injection

Joomla! Component JE Property Finder 1.6.3 - SQL Injection Exploit Title: Joomla! Component JE Property Finder 1.6.3 - SQL Injection Google Dork: inurl:index.php?option=comjepropertyfinder Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Property Finder 1.6.3 - SQL Injection

Exploit Title: Joomla! Component JE Property Finder 1.6.3 - SQL Injection Google Dork: inurl:index.php?option=comjepropertyfinder Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Viavi Real Estate - SQL Injection

Viavi Real Estate - SQL Injection Exploit Title: Viavi Real Estate - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/viavi-real-estate/11217313 Demo: http://viavilab.com/codecanyon/realestatedemo/ Version: N/A Tested...

Information Disclosure Or Denial Of Service (DoS)

libplist is vulnerable to information disclosure and denial of service DoS attacks. The vulnerability exists because the base64decode function in base64.c does not handle split encoded Apple Property List data...

libimobiledevice libplist Denial of Service Vulnerability

libimobiledevice is a software protocol library and tool that allows Linux to support connectivity to iOS devices such as the iPhone, iPodTouch, etc. libplist is one of the libraries that handles the ApplePropertyList format in either binary or XML format. A denial of service vulnerability exists...

IBM UrbanCode Deploy Multiple Vulnerabilities

IBM UrbanCode Deploy is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:urbancodedeploy"; ...

Informatica: [marketplace.informatica.com]- Stored XSS on Image title and Edit Property

By uploading and image with the title of ".jpg and allowing anyone to edit the Document under collaboration settings, XSS can be triggered by any user attempting to edit the document. POC ==== 1. Log into marketplace and go to profile page. Select New Document 2. Choose to upload document and...

Property Listing Script - propid Blind SQL Injection

Property Listing Script - propid Blind SQL Injection Exploit Title: Property Listing Script – Time-Based Blind Injection Date: 02.02.2017 Vendor Homepage: http://phprealestatescript.org/ Software Link: http://phprealestatescript.org/property-listing-script.html Exploit Author: Kaan KAMIS Contact:...

Property Listing Script - 'propid' Blind SQL Injection

Exploit Title: Property Listing Script – Time-Based Blind Injection Date: 02.02.2017 Vendor Homepage: http://phprealestatescript.org/ Software Link: http://phprealestatescript.org/property-listing-script.html Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com...