Oracle Hospitality Cruise Shipboard Property Management System Remote Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection

Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection Exploit Title: Joomla! Component Ultimate Property Listing v1.0.2 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://faboba.com/ Software:...

tomcat: system property disclosure

It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...

Mitsubishi Electric E-Designer SetupAlarm Font Property Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Unspecified Vulnerability in Oracle Hospitality 9700

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle.Hospitality 9700 is one of the hospitality management components. A security vulnerability exists in the Property Management Systems subcomponent of the...

leadingpropertygroupspain.com XSS vulnerability

Open Bug Bounty ID: OBB-265520 Description| Value ---|--- Affected Website:| leadingpropertygroupspain.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora 26 : pcre2 (2017-e4c6ab648b)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mode is enabled. It also fixes an incortect cast in UTF validation routine. Note that Tenable Network Security has extracted the...

Fedora 26 : pcre (2017-188135cba8)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mde enabled. It also fixes a buffer overlflow in pcretest tool when copying a string in UTF-32 mode. Note that Tenable Network...

Windows Browser Example Exploit

This template covers IE8/9/10, and uses the user-agent HTTP header to detect the browser version. Please note IE8 and newer may emulate an older IE version in compatibility mode, in that case the module won't be able to detect the browser correctly. This is an example Metasploit module to be used...

CVE-2017-10925

IrfanView 4.44 32bit with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

hunterpropertyinc.com XSS vulnerability

Vulnerable URL: http://hunterpropertyinc.com/map.asp?Street=3465+S%2E+Campbell+Springfield+MO+65807=330=1"...

anandproperty.in XSS vulnerability

Open Bug Bounty ID: OBB-257908 Description| Value ---|--- Affected Website:| anandproperty.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

infinityschools.net XSS vulnerability

Vulnerable URL: http://www.infinityschools.net/insurance.asp?LicenseType=Property/Casualty=1"...

kburby.sugarpinerealty.com XSS vulnerability

Vulnerable URL: http://kburby.sugarpinerealty.com/listings/query.php?elegant=yescategory=1=6=109=1"...

architectureforsale.com XSS vulnerability

Vulnerable URL: http://architectureforsale.com/property-details.php?propertyID=1"...

SUSE-SU-2017:1632-1 Security update for tomcat6

This update for tomcat6 fixes the following issues: Tomcat was updated to version 6.0.53: The full changelog is: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html Security issues fixed: - CVE-2017-5647: A bug in the handling of pipelined requests could lead to information disclosure bsc10366...

heritagepropertyservices.co.uk XSS vulnerability

Vulnerable URL: http://www.heritagepropertyservices.co.uk/properties/gallery/?FormSearchText=York"'--!==geopoints=53.962301=-1.081884=9.5=1=gallery=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

The butterfly effect and the program error---a slag-hole the use-vulnerability warning-the black bar safety net

Description A South American Amazon Basin rainforest butterfly, occasionally flapping a few wings, maybe in Texas cause a tornado? This I'm not sure I can determine is the program of any one of the minor errors after amplification are possible for the program to produce disastrous consequences...

Google Chrome V8 Private Property Arbitrary Code Execution

// Source: https://github.com/secmob/pwnfest2016/ function exploit function tohexnum return num0.toString16; function intarraytodoubleintarr var uBuf = new Uint32Array2; var dBuf = new Float64ArrayuBuf.buffer; uBuf0=intarr0; uBuf1=intarr1; return dBuf0; function strtodoublestr//leng of str must b...

Google Chrome - V8 Private Property Arbitrary Code Execution

Google Chrome - V8 Private Property Arbitrary Code Execution // Source: https://github.com/secmob/pwnfest2016/ function exploit function tohexnum return num0.toString16; function intarraytodoubleintarr var uBuf = new Uint32Array2; var dBuf = new Float64ArrayuBuf.buffer; uBuf0=intarr0;...