phptpoint Pharmacy Management System 1.0 - 'username' SQL injection

Exploit Title: phptpoint Pharmacy Management System 1.0 - 'username' SQL injection Date: 2018-10-24 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: https://www.phptpoint.com/pharmacy-management-system/ Version: 1 Tested...

PT-2018-13823

Name of the Vulnerable Software and Affected Versions LimeSurvey version 3.14.7 Description A security issue has been found in LimeSurvey, where HTML Injection and Stored XSS can be executed via the surveyls title parameter to the "/index.php?r=admin/survey/sa/insert" API endpoint. Recommendation...

CVE-2018-3643

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...

CVE-2018-3643: Undefined Security Weakness

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...

PT-2018-16108

Name of the Vulnerable Software and Affected Versions IntelR Converged Security and Management Engine CSME versions prior to 11.8.55 IntelR Converged Security and Management Engine CSME versions prior to 11.11.55 IntelR Converged Security and Management Engine CSME versions prior to 11.21.55 Inte...

a-r-k.de XSS vulnerability

Open Bug Bounty ID: OBB-673504 Description| Value ---|--- Affected Website:| a-r-k.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Xovis PC2, PC2R and PC3 XML External Entity Injection Vulnerabilities

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. An XML external entity injection vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by an attacker to disclose information...

CVE-2018-11718

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

R 3.4.4 - Buffer Overflow (SEH)

R 3.4.4 - Buffer Overflow SEH -------------------------------------------------------- Exploit Title: R v3.4.4 - SEH Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-08-22 Vendor Homepage : https://www.r-project.org/ Tested on OS: Windows 7 Social: twitter.com/ZwX2a contact:...

R 3.4.4 Bufer Overflow

-------------------------------------------------------- Exploit Title: R v3.4.4 - SEH Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-08-22 Vendor Homepage : https://www.r-project.org/ Tested on OS: Windows 7 Social: twitter.com/ZwX2a contact: [email protected] Website:...

R v3.4.4 Software - (SEH) Buffer Overflow Vulnerability

Document Title: =============== R v3.4.4 Software - SEH Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2143 Release Date: ============= 2018-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 214...

R v3.4.4 Software - (SEH) Buffer Overflow Vulnerability

Document Title: =============== R v3.4.4 Software - SEH Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2143 Release Date: ============= 2018-08-26 Vulnerability Laboratory ID VL-ID: ==================================== 214...

PT-2018-5652

Name of the Vulnerable Software and Affected Versions: Insteon Hub 2245-222 version 1012 Description: The issue arises from specially crafted replies received from the PubNub service, which can cause buffer overflows on a global section, overwriting arbitrary data. An attacker must impersonate...

PT-2018-5651

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: A buffer overflow issue exists in the PubNub message handler for the "control" channel. Specially crafted replies from the PubNub service can cause buffer overflows, overwriting arbitrary data. The insteo...

Fresh Approach to WiFi Cracking Uses Packet-Sniffing

Legacy WiFi just became a little less safe, according to Jens Steube, the developer of the password-cracking tool known as Hashcat. He has found a faster, easier way to crack some WPA/WPA2-protected WiFi networks. Hackers have compromised the WPA/WPA2 encryption protocols in the past, but it’s an...

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

PT-2018-12592

Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description The issue allows for CSRF to add a background administrator account through the "index.php?r=admini/admin/create" endpoint. Recommendations For BageCMS version 3.1.3, consider implementing CSRF protection...

CVE-2018-14582: Cross-Site Request Forgery (CSRF)

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

Debian DLA-1424-1 : linux-latest-4.9 new package

Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the 'jessie-backports' suite. However, 'apt full-upgrade' will not automatically install the updated kernel packages. You should explicitly install one...

r-mugendou.com XSS vulnerability

Open Bug Bounty ID: OBB-650637 Description| Value ---|--- Affected Website:| r-mugendou.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...