Lucene search
+L

1341 matches found

exploitpack
exploitpack
added 2015/08/15 12:00 a.m.39 views

Security IP Camera Star Vision DVR - Authentication Bypass

Security IP Camera Star Vision DVR - Authentication Bypass Exploit Title: Security IP Camera Star Vision DVR Authentication Bypass Date: 2015-08-13 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: Version: All Versions Exploit : 1 - First, open your Chrome...

1.1AI score
SaveExploits0
Patchstack
Patchstack
added 2015/07/03 12:00 a.m.12 views

WordPress GD Star Rating Plugin <= 1.9.16 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.1AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2015/07/03 12:00 a.m.13 views

WordPress GD Star Rating Plugin <= 1.9.7 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2015/07/03 12:00 a.m.12 views

WordPress GD Star Rating Plugin <= 1.9.18 - Security Bypass

Because of this vulnerability, attackers can bypass certain security restrictions. Solution Update the plugin...

3.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.16 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the star-1.5a25 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.03009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.16 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the star-1.5a08 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

6.8CVSS5.4AI score0.03009EPSS
SaveExploits0References2Affected Software1
exploitpack
exploitpack
added 2015/02/04 10:54 a.m.17 views

RedStar-2.0-Desktop-Privilege-Escalation

Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit" which can be abused to execute commands on boot. An example exploitation of this vulnerability is shown here...

2.8AI score
SaveExploits0
CNVD
CNVD
added 2015/01/15 12:00 a.m.11 views

WordPress Plugin GD Star Rating SQL Injection Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.GD Star Rating plugin is a rating and voting plugin. WordPress plugin GD Star Rating SQL injection vulnerability. Due ...

7.5CVSS8.2AI score0.01641EPSS
SaveExploits0References1
zdt
zdt
added 2015/01/13 12:00 a.m.38 views

RedStar 2.0 Desktop - Privilege Escalation (World-writeable rc.sysinit) Vulnerability

Exploit for linux platform in category local exploits Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit" which can be abused to execute commands on boot. An example exploitation of this vulnerability is shown here...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2015/01/13 12:00 a.m.36 views

Red Star 3.0 Desktop Local Root

!/bin/bash Another local 0day in Red Star 3.0 Desktop by TheGreatLeader Run exploit in a X11 terminal and enjoy a root shell... Create temp dir for our payload mkdir /tmp/DPRK msfpayload linux/x86/exec PrependSetuid=true CMD=/bin/bash X echo -e -n...

0.1AI score
SaveExploits0
NVD
NVD
added 2015/01/12 3:59 p.m.27 views

CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

7.5CVSS8.4AI score0.01641EPSS
SaveExploits0References3
NVD
NVD
added 2015/01/12 3:59 p.m.18 views

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

6.8CVSS7.6AI score0.01014EPSS
SaveExploits1References4
Prion
Prion
added 2015/01/12 3:59 p.m.21 views

Sql injection

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

7.5CVSS9.1AI score0.01641EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2015/01/12 3:00 p.m.54 views

CVE-2014-2839

The CVE-2014-2839 entry concerns the WordPress GD Star Rating plugin, affected version 19.22. The vulnerability is a SQL injection in the s parameter of the gd-star-rating-stats page (wp-admin/admin.php), allowing a remote administrator to execute arbitrary SQL commands. This is rooted in insuffi...

7.5CVSS8.7AI score0.01641EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2015/01/12 3:00 p.m.64 views

CVE-2014-2838

CVE-2014-2838 affects the WordPress plugin GD Star Rating (v19.22). The vulnerability set includes CSRF that can hijack administrator authentication, enabling requests that conduct (1) SQL injection via the s parameter on the gd-star-rating-stats page to wp-admin/admin.php and (2) cross-site scri...

6.8CVSS7.8AI score0.01014EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2015/01/12 3:00 p.m.33 views

CVE-2014-2838

Multiple cross-site request forgery CSRF vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct 1 SQL injection attacks via the s parameter in the gd-star-rating-stats page to...

7.6AI score0.01014EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2015/01/12 3:00 p.m.38 views

CVE-2014-2839

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php...

8.4AI score0.01641EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2014/11/10 12:00 a.m.30 views

WordPress Another Classifieds Plugin - SQL Injection

This WordPress GD Star Rating plugin's "keywordphrase" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database when doing a search for classifieds. Solution...

7.5CVSS2.6AI score0.04594EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2014/11/10 12:00 a.m.30 views

WordPress Another Classifieds Plugin - SQL Injection

This WordPress GD Star Rating plugin's "keywordphrase" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database when doing a search for classifieds. Solution...

7.5CVSS2.6AI score0.04594EPSS
SaveExploits2References1Affected Software1
myhack58
myhack58
added 2014/11/04 12:00 a.m.40 views

A General campus of the system to the presence of multiple high-risk vulnerabilities(registration logic&getshell)-vulnerability warning-the black bar safety net

About Beijing Chong star weiye software Technology Co., Ltd. development of the education system vulnerability report 1. A large cattle submitted to such a vulnerability : the versatility of the SQL injection vulnerability of 1influence of Beijing, all kindergarten schools, etc., a SQL injection...

8AI score
SaveExploits0
Rows per page
Query Builder