Online Course Registration 1.0 Remote Code Execution

Exploit Title: Online Course Registration 1.0 - Unauthenticated Remote Code Execution Exploit Author: Bobby Cooke Credit to BKpatron for similar Auth Bypass on admin page - exploit-db.com/exploits/48559 Date: 2020-07-15 Vendor Homepage: Vendor Homepage:...

Design/Logic Flaw

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Registration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

The vulnerability of the VM-Series network interface cards is related to insufficient protection of registration data, which allows attackers to disclose sensitive information and cause service failures.

The vulnerability of the VM-Series network firewalls is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...

The vulnerability of the /var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var component of the cockpit-ovirt plugin, a software tool for managing virtualization of servers and workstations on Red Hat Virtualization, allows a attacker to expose the credentials of a privileged user.

The vulnerability of the /var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var component of the cockpit-ovirt plugin, a software tool for managing virtualization of servers and workstations in Red Hat Virtualization, is related to insufficient protection of registration data...

CVE-2020-7576

A vulnerability has been identified in Camstar Enterprise Platform All versions, Opcenter Execution Core All versions V8.2, Opcenter Execution Core V8.2. An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting XSS attacks...

PT-2020-19633 · Siemens · Opcenter Execution Core +1

Name of the Vulnerable Software and Affected Versions: Camstar Enterprise Platform versions all Opcenter Execution Core versions prior to V8.2 Opcenter Execution Core version V8.2 Description: A stored Cross-Site Scripting XSS attack can be performed by an authenticated user with the ability to...

Savsoft Quiz 5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Savsoft Quiz 5 - Persistent Cross-Site Scripting Exploit Author: Ogulcan Unverenth3d1gger Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Kali Linux...

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient protection of registration data. This allows attackers to obtain administrator login credentials.

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient...

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient protection of registration data. This allows attackers to obtain administrator login credentials.

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient...

Savsoft Quiz 5 Cross Site Scripting

Exploit Title: Savsoft Quiz V5 - Persistent Cross-Site Scripting Date: 2020-07-09 Exploit Author: th3d1gger Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Kali Linux ---Vulnerable Source Code---- function insertuser2...

The vulnerability of the etc/artemis-users.properties component of the asynchronous messaging system Apache ActiveMQ Artemis is related to insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the etc/artemis-users.properties component in the asynchronous message exchange system using Apache ActiveMQ Artemis is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

CVE-2020-15599

Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

CVE-2020-15535

An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...

CVE-2020-15535

An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...

CVE-2020-15536

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

CVE-2020-15536

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

Design/Logic Flaw

An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields...

Design/Logic Flaw

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

CVE-2020-15535

The CVE-2020-15535 entry concerns the WordPress plugin bestsoftinc Car Rental System (up to version 1.3). The vulnerability is a persistent cross-site scripting (XSS) flaw that can be triggered via registration fields in the plugin’s UI, leading to stored XSS. Several connected sources corroborat...