Secure Computing SnapGear Management Console SG560 v3.1.5 CSRF Add Super User

Summary The SG gateway appliance range provides Internet security and privacy of communications for small and medium enterprises, and branch offices. It simply and securely connects your office to the Internet, and with its robust stateful firewall, shields your computers from external threats...

SnapGear Management Console SG560 3.1.5 - Cross-Site Request Forgery (Add Super User)

Title: SnapGear Management Console SG560 3.1.5 - Cross-Site Request Forgery Add Super User Author: LiquidWorm Date: 2020-06-04 Vendor: http://www.securecomputing.com CVE: N/A Secure Computing SnapGear Management Console SG560 v3.1.5 CSRF Add Super User Vendor: Secure Computing Corp. Product web...

bbPress 2.6-2.6.5 - Authenticated Privilege Escalation via the Super Moderator feature

hoangkien1020 discovered an authenticated privilege escalation issue via the super moderator feature...

Super Backup 2.0.5 for iOS - Directory Traversal Vulnerability

Exploit for iOS platform in category web applications Title: Super Backup 2.0.5 for iOS - Directory Traversal Software: https://apps.apple.com/us/app/super-backup-export-import/id1052684097 CVE: N/A Document Title: =============== Super Backup v2.0.5 iOS - Directory Traversal Vulnerability Produc...

Super Carbon Coin Has a Logic Flaw Vulnerability

Super Carbon Coin SCC is an ethereum digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SCC. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Command Execution Vulnerability in Super CMS Backend fi***.ma***.php File

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

super-lastminute.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144400 Security Researcher kun-fly Helped patch 668 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting super-lastminute.pl website...

Unauthorized Access Vulnerability in Superstar Huiya E-Books

Super Star Huiya eBooks is currently the world's largest Chinese online digital library, providing a large number of eBook resources for reading, including literature, economics, computers, and more than 50 categories. Unauthorized access vulnerability exists in Super Star Huiya eBooks, which can...

WordPress WP Forms 1.5.8.2 Cross Site Scripting

Exploit Title: Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisory:...

Hefei Yilang Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Hefei Yilang Network Technology Co., Ltd. is a company specializing in Internet technology services, development and application. Hefei a wave of network technology limited company building system there are logical flaws in the vulnerability, the attacker can use the loophole to obtain super...

CVE-2012-6614

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password...

Default credentials

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password...

CVE-2012-6614

CVE-2012-6614 affects the D-Link DSR-250N family, specifically firmware versions before 1.08B31. The vulnerability allows remote authenticated users to obtain persistent root access via the BusyBox CLI, demonstrated by overwriting the superuser password. Reported impact includes high confidential...

WordPress Super Socializer plugin <= 7.12.37 - Bypass vulnerability

Bypass vulnerability discovered by NinTechNet in WordPress Super Socializer plugin versions = 7.12.37. Solution Update the Super Socializer plugin to the latest available version at least 7.12.38...

CVE-2013-2009

WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution...

CVE-2013-2008

WordPress Super Cache Plugin 1.3 has XSS...

Cross site scripting

WordPress Super Cache Plugin 1.3 has XSS...

Code injection

WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution...

CVE-2013-2009

WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution...

CVE-2013-2009

The CVE-2013-2009 entry concerns WordPress WP Super Cache Plugin 1.2, which is vulnerable to remote PHP code execution via unsanitized input (e.g., malicious blog comments). Root cause cited as an incomplete fix for CVE-2013-2009. Impact is remote code execution on the web server as the web-serve...