10-Strike Bandwidth Monitor 3.9 - Buffer Overflow (SEH) (ASLR + DEP Bypass)

Exploit Title: 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow SEH,DEP,ASLR Exploit Author: Bobby Cooke Date: 2020-07-07 Vendor Site: https://www.10-strike.com/ Software Download: https://www.10-strike.com/bandwidth-monitor/bandwidth-monitor.exe Tested On: Windows 10 - Pro 1909 x86 Version:...

CVE-2020-13996

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...

SQL Injection Vulnerability in Website Building System of Ningbo Yizeli Network Technology Co.

Ningbo Yi Zeli Network Technology Co., Ltd. is a foreign trade marketing and promotion company, focusing on providing integrated Internet promotion solutions for foreign trade enterprises. Ningbo Yizeli Network Technology Co., Ltd. website building system has a SQL injection vulnerability,...

SQL injection vulnerability in ab***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co. Shijiazhuang Baicheng Network Technology Co., Ltd. building system ab.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Extreme CMS Co***.php File

Extreme CMS is an open source and free PHPCMS web content management system. Extreme CMS Co.php file has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Bandwidth Monitor 3.9 Full ROP Buffer Overflow

Exploit Title: Bandwidth Monitor 3.9 - Full ROP Buffer Overflow SEH,DEP,ASLR Exploit Author: Bobby Cooke Date: June 7th, 2020 Vendor Site: https://www.10-strike.com/ Software Download: https://www.10-strike.com/bandwidth-monitor/bandwidth-monitor.exe Tested On: Windows 10 - Pro 1909 x86 Version:...

10-Strike Bandwidth Monitor 3.9 Buffer Overflow Exploit

10-Strike Bandwidth Monitor version 3.9 ROP VirtualAlloc buffer overflow exploit with SEH, DEP, and ASLR. Exploit Title: 10-Strike Bandwidth Monitor 3.9 - ROP VirtualAlloc - Buffer Overflow SEH,DEP,ASLR Exploit Author: Bobby Cooke Date: June 7th, 2020 Vendor Site: https://www.10-strike.com/...

SQL Injection Vulnerability in UFIDA NC

UFIDA NC6 is a new series of UFIDA NC products, a world-class high-end management software for group enterprises. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in the pho*** page of the website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system pho page exists SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Website Building System of Jinhua Yitu Network Technology Co.

Ltd. is a professional creative design company dedicated to online marketing and brand image strategy design. There is a SQL injection vulnerability in the website building system of Jinhua Yitu Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from t...

rConfig SQL Injection Vulnerability (CNVD-2020-38220)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig 3.9.4 and earlier versions, which stems from the program storing node passwords in plaintext. An attacker can exploit this vulnerability to access a listened network device...

Cisco Prime Infrastructure Software SQL Injection Vulnerability

Cisco Prime Infrastructure Software is the United States Cisco Cisco company's set of basic network lifecycle management solutions. The product integrates Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS. An SQL injection vulnerability exists in the web-based...

CVE-2020-3339

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...

SQL Injection Vulnerability in Shouyue Information Network Co.

Shou Yueh Information Network Co., Ltd. is a company that combines consulting network, marketing channel, and system software. A SQL injection vulnerability exists in Shouyue Information Network Co., Ltd.'s website system, which can be exploited by attackers to obtain sensitive information from t...

SQL Injection Vulnerability in Website Building System of Suzhou Jushang Network Technology Co.

Suzhou Jushang Network Technology Co., Ltd. specializes in enterprise website construction and e-commerce services, including enterprise e-commerce solutions, website construction, domain name registration, web hosting, enterprise post office, software development, system integration, Baidu searc...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-32623)

LJCMS is a free and open source content management system. LLJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

Wuhu ECCOM Information Technology Co., Ltd. website building system has SQL injection vulnerability

Wuhu eXpress Information Technology Co., Ltd. is an Internet application service solution provider. There is a SQL injection vulnerability in the website building system of Wuhu ECCOM Information Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...

SQL Injection Vulnerability in Online Car Rental Service System

Online car rental service system is an O2O service platform built based on car rental business scenarios. There is a SQL injection vulnerability in the Online Car Rental Service System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in National Digital Learning Resource Center Website Building System

The National Center for Digital Learning Resources NCDLR is a business unit engaged in the research, development, promotion and service of digital learning resources and education informatization software. A SQL injection vulnerability exists in the National Digital Learning Resource Center's...

SQL injection vulnerability in PIMS online order management system re***.php file

PIMS online order management system for single-page ordering sites, general product ordering sites and other ordering sites, designed to facilitate the full background management through the fast integration of Alipay, Paypal, eBao, netbank online, PayPal and other payment interfaces, management ...