CVE-2014-3871

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...

CVE-2014-3871

CVE-2014-3871 documents multiple SQL injection vulnerabilities in Geodesic Solutions GeoCore MAX 7.3.3 (Ge oAuctions/GeoClassifieds) where remote attackers can trigger SQL commands via the register.php parameters (1) c[password] and (2) c[username]. The entry notes that the b parameter in index.p...

CVE-2014-3871

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...

Easy currency network operation and maintenance improper leads can be randomly logged in user-bug warning-the black bar safety net

Easy currency network operation and maintenance improper can lead to a random user login http://www. easecoin. com/ vulnerability address You can get the user SESSION login ! ! Feel free to test landing 2 Repair solutions: You can repair, I will not waste the effort of typing to what vulnerabilit...

The only product of operational misconduct lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Subject to the openssl Heartbleed impacts, Vulnerability ID: CVE-2 0 1 4-0 1 6 0 ! https://passport.vip.com ! Repair solutions: Test of the party's time has come...

SQL Injection in AdRotate

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

GeoCore MAX DB Ver. 7.3.3 - Time-Based Blind Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: GeoCore MAX DB Ver. 7.3.3 - Time-Based Blind Injection Official site: http://geodesicsolutions.com Risk Level: High Vendor : http://geodesicsolutions.com Exploit Author: Esac Homepage author : www.iss4m.ma Last Checked: 25/04/20...

GeoCore MAX DB Ver. 7.3.3 - Blind SQL Injection

Exploit Title: GeoCore MAX DB Ver. 7.3.3 - Time-Based Blind Injection Official site: http://geodesicsolutions.com Risk Level: High Vendor : http://geodesicsolutions.com Exploit Author: Esac Homepage author : www.iss4m.ma Last Checked: 25/04/2014 +----------+ | OVERVIEW | +----------+ GeoCore is t...

GeoCore MAX DB 7.3.3 Blind SQL Injection Vulnerability

GeoCore MAX DB version 7.3.3 suffers from a time-based remote blind SQL injection vulnerability. Exploit Title: GeoCore MAX DB Ver. 7.3.3 - Time-Based Blind Injection Official site: http://geodesicsolutions.com Risk Level: High Demo : http://geodesicsolutions.com/demo/ Exploit Author: Esac Homepa...

SNEHA IT Soluctions's LFI Vulnerabilities

Exploit for windows platform in category web applications --------------------index.php-------------------- $page = $GET'page'; if$page!="" $p= $page; else echo "window.location = 'index.php';"; include SOURCES . $p; --------------------index.php-------------------- So you can include a fil by...

Google Gives Refund to Thousands of Buyers Who Bought Bogus Android AntiVirus App

About a week back we reported about a popular paid Antivirus application on the Google Play Store which was actually a scam, dubbed as ‘Virus Shield’. This First paid fake app managed to become one of the most popular anti-virus app in less than a week, and apparently more than 10,000 Smartphones...

CVE-2014-0361

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

CVE-2014-0361

CVE-2014-0361 applies to IBM 4690 OS (used by Toshiba Global Commerce Solutions 4690 POS and related products). The issue stems from the ADXCRYPT password-hashing algorithm, which is vulnerable to known-plaintext attacks and hash collisions, enabling context-dependent attackers to obtain or deduc...

CVE-2014-2829

Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

Code injection

Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

CVE-2014-2829

Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

CVE-2014-2829

CVE-2014-2829 affects Erlang Solutions MongooseIM up to 1.3.1 rev. 2. The vulnerability arises because compressed XML elements are not properly restricted during XMPP stream processing, enabling a remote attacker to cause a denial of service via a crafted xmppbomb-like stream. The impact is resou...

Cisco Grand Challenge to Fix Internet of Things Security

As seemingly every new gadget and electronic device is coming retrofitted with an Internet connection these days – appliances, cars and medical devices a few chief examples, the floodgates have opened ever wider for an alarming number of new attack vectors. The burgeoning evolution of “Internet o...

WordPress Plugin AdRotate 3.9.4 - 'clicktracker.ph?track' SQL Injection

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

WordPress Plugin AdRotate 3.9.4 - clicktracker.ph?track SQL Injection

WordPress Plugin AdRotate 3.9.4 - clicktracker.ph?track SQL Injection Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30...