Netis WF2419 Router - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netis-WF2419 Router Cross-Site Request Forgery CSRF Exploit Author: Sajibe Kanti Author Contact: https://twitter.com/@sajibekantibd Vendor Homepage: http://www.netis-systems.com/ Version: Netis-WF2419, V2.2.36123 Tested on:...

Fedora 27 : 2:qemu (2017-8db9c497f9)

Fix ppc64 KVM failure bz 1501936 - CVE-2017-15038: 9p: information disclosure when reading extended attributes bz 1499111 - CVE-2017-15268: potential memory exhaustion via websock connection to VNC bz 1496882 ---- qemu-pr-helper didn't work due to a change in the libmultipath/libmpathpersist APIs...

CVE-2017-1000500

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Joomla JHotelReservation 6.0.5 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Joomla JHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomlahotelreservation URL:...

Joomla JMultipleHotelReservation 6.0.5 SQL Injection

Title: Joomla JMultipleHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomla-hotel-portal URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jmultiplehotelreservation/ Product: 'Joomla...

Joomla JHotelReservation 6.0.5 SQL Injection

Title: Joomla JHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomlahotelreservation URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jhotelreservation/ Product: 'Joomla JHotelReservation 6.0.5'...

CVE-2018-5191

CVE-2018-5191 is a reservation duplicate of CVE-2017-1000479 and not a separate vulnerability entry. CVE-2017-1000479 affects pfSense versions 2.4.1 and lower, exposing a clickjacking vulnerability in the CSRF error page that can lead to privileged code execution because the check occurs before a...

CVE-2017-12812

PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...

SUSE-SU-2017:3311-1 Security update for slurm

This update for slurm fixes the following issues: Slurm was updated to 17.02.9 to fix a security bug, bringing new features and bugfixes fate323998 bsc1067580. Security issue fixed: CVE-2017-15566: Fix security issue in Prolog and Epilog by always prepending SPANK to all user-set environment...

JVN#78501037: Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Impact An attacker who...

CVE-2017-1000204

CVE-2017-1000204 is rejected; this candidate is a reservation duplicate of CVE-2016-9920 and not an active vulnerability entry.

CVE-2017-1000233

OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session. Affected versions: prior to 6.1.6 and prior to 7.0.3. Remediation: upgrade to OpenProject 6.1.6 or newer, or 7.0.3 or new...

CVE-2017-13826

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-10140. Reason: This candidate is a reservation duplicate of CVE-2017-10140. Notes: All CVE users should reference CVE-2017-10140 instead of this candidate. All references and descriptions in this candidate have been removed t...

Why cache file size of "Cache on device RAM with overflow on hard disk" is growing faster than "Cache on device hard disk"

Cache Type = "Cache on device hard disk" The block reservation of "Cache on device hard disk" is ONLY 4KB, and it's random I/O. Cache Type = "Cache on device RAM with overflow on hard disk" Since "overflow on hard disk" is vhdx format, the block reservation is 2MB & required for sequential I/O,...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4003. Reason: This candidate is a reservation duplicate of CVE-2016-4003. Notes: All CVE users should reference CVE-2016-4003 instead of this candidate. All references and descriptions in this candidate have been removed to...

DEBIAN-CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

Tcpdump RSVP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.RSVP parser is one of the resource reservation protocol parsers. A...

ICHotelReservation 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

Hotel Reservation Site Script 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...