2417 matches found
Tweek!DM Document Management Bypass / SQL Injection
https://www.osisecurity.com.au/tweekdm-document-management-authentication-bypass-sql-injection-vulnerabilities.html Date: 04-Apr-2017 Product: Tweek!DM Document Management Versions affected: Unknown Vulnerabilities: 1 Authentication bypass - the software sends a 301 Location redirect back to the...
CVE-2017-0882
Removed by vendor...
Steam Profile Integration 2.0.11 - SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection Google Dork: inurl:tab=nodesteamsteamprofile Date: 13/03/2017 Exploit Author: DrWhat Vendor Homepage:...
Security update 2017-03-14
...
Security update 2017-03-14
...
GPS Tools v4.0.1,4.0.1,SQL Injection
GPS Tools v4.0.1,4.0.1,SQL Injection Developer release statement to the vel team https://www.corejoomla.com/news/1163-gps-tools-v4-0-2-is-released.html...
Description of the cumulative update package for Office Communications Server 2007 R2, Application Sharing Server: November 2010
Describes the issues that are fixed in the Office Communications Server 2007 R2, Application Sharing Server update package that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Application Sharing Server issue that is fixed in the cumulative...
MS12-004: Description of the security update for Windows Multimedia Library for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 10, 2012
MS12-004: Description of the security update for Windows Multimedia Library for Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-004. To view the complete security bulletin, visit one of the...
CVE-2016-9207
A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP connections to arbitrary hosts. This does not allow for full traffic proxy through the Expressway. Affected Products: This vulnerability affects Cisco Expresswa...
CVE-2016-7944
Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...
ATutor 2.2.2 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kuma...
ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)
Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kumar Contact: https://facebook.com/06saravanakumar...
Security update 2016-11-08
...
Security update 2016-11-08
...
Security update 2016-10-11
...
FreePBX Remote Command Execution
Title : Freepbx =begin Freepbx 13.x are vulnerable to Remote command execution due to the insuffecient sanitization of the user input fields language,destination and also due to the lack of good authentication checking Technical details Vulnerable file :...
Security update 2016-09-13
...
Zabbix 3.0.3 SQL Injection
========================================== Title: Zabbix 3.0.3 SQL Injection Vulnerability Product: Zabbix Vulnerable Versions: 2.2.x, 3.0.x Fixed Version: 3.0.4 Homepage: http://www.zabbix.com Patch link: https://support.zabbix.com/browse/ZBX-11023 Credit: 1N3@CrowdShield...
Security update 2016-07-12
...
WordPress Ultimate Member 1.3.64 Local File Inclusion
------------------------------------------------------------------------ Ultimate Member Local File Inclusion vulnerability ------------------------------------------------------------------------ Burak Kelebek, July 2016 ------------------------------------------------------------------------...