PBBoard CMS SQL Injection

Vulnerability title: SQL Injection in PBBoard CMS CVE: CVE-2014-9215 CMS: PBBoard Vendor: Power bulletin board - http://www.pbboard.info/ Product: http://sourceforge.net/projects/pbboard/files/PBBoardv3.0.1/PBBoardv3.0.1.zip/download Affected version: Version 3.0.1 updated on 13/09/2014 and befor...

Technicolor DT5130 V2.05.C29GV - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Product: Wireless N ADSL 2/2+ Modem Router Firmware Version : V2.05.C29GV Modem Type : ADSL2+ Router Modem Vendor : Technicolor Model: DT5130 Bugs: 1- Unauth Xss - CVE-2014-9142 user=teste&password=teste&...

Technicolor DT5130 2.05.C29GV - Multiple Vulnerabilities

Product: Wireless N ADSL 2/2+ Modem Router Firmware Version : V2.05.C29GV Modem Type : ADSL2+ Router Modem Vendor : Technicolor Model: DT5130 Bugs: 1- Unauth Xss - CVE-2014-9142 user=teste&password=teste&...

Debian Security Advisory DSA 3089-1 (jasper - security update)

Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3089.nasl 6692 2017-07-12...

ADSL2+ 2.05.C29GV XSS / URL Redirect / Command Injection

Product: Wireless N ADSL 2/2+ Modem Router Firmware Version : V2.05.C29GV Modem Type : ADSL2+ Router Modem Vendor : Technicolor Model: DT5130 Bugs: 1- Unauth Xss - CVE-2014-9142 user=teste&password=teste&...

Debian: Security Advisory (DSA-3089-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SA-CONTRIB-2014-117 - Hierarchical Select - Cross Site Scripting (XSS)

The Hierarchical Select module provides a "hierarchicalselect" form element, which is a greatly enhanced way for letting the user select items in a taxonomy. The module does not sanitize some of the user-supplied data before displaying it, leading to two Cross Site Scripting XSS vulnerabilities...

CVE-2014-8877 - Code Injection in Wordpress CM Download Manager plugin

Vulnerability title: Code Injection in Wordpress CM Download Manager plugin CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Product: https://wordpress.org/plugins/cm-download-manager/ Affected version: 2.0.0 and previous version Fixed version:...

Multiple SQL Injection in SP Client Document Manager plugin

Vulnerability title: Multiple SQL Injection in SP Client Document Manager plugin Plugin: SP Client Document Manager Vendor: http://smartypantsplugins.com Product: https://wordpress.org/plugins/sp-client-document-manager/ Affected version: version 2.4.1 and previous version Fixed version: N/A Goog...

ManageEngine OpManager FileCollector Servlet File Upload

File upload vulnerability in ManageEngine OpManager FileCollector servlet FILENAME parameter Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ManageEngine OpManager MigrateCentralData Servlet File Upload

File upload vulnerability in ManageEngine OpManager MigrateCentralData servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

[oCERT 2014-008] libFLAC multiple issues

Description: FLAC is an open source lossless audio codec supported by several software and music players. The libFLAC project, an open source library implementing reference encoders and decoders for native FLAC and Ogg FLAC audio content, suffers from multiple implementation issues. In particular...

DSA-3082-1 flac - security update

Bulletin has no description...

PBBoard 2.1.4 username SQL Injection

SQL Injection vulnerabilty in PBBoard index.php username parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ManageEngine OpManager MigrateLEEData Servlet File Upload

File upload vulnerability in ManageEngine OpManager MigrateLEEData servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

[Responsible disclosure] Hacking Facebook.com/thanks Posting on behalf of your friends!

Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. Facebook recently introduced "Say Thanks", an experience that lets Facebook user to create personalized video cards for their facebook friends. To create a Thanks...

WordPress Plugin DB Backup - Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress db-backup plugin File Download Vulnerability | | Google Dork: inurl:wp-content/plugins/db-backup/ | | Date : Date: 2014-11-26 | | Exploit Autho...

Android SMS Resend Vulnerability

Android versions prior to 5.0 allow an unprivileged application the ability to resend all the SMS's stored in the users phone. INTRODUCTION ================================== In Android 5.0, an unprivileged app can resend all the SMS stored in the user's phone to their corresponding recipients or...

flac -- Multiple vulnerabilities

Erik de Castro Lopo reports: Google Security Team member, Michele Spagnuolo, recently found two potential problems in the FLAC code base. They are: CVE-2014-9028: Heap buffer write overflow. CVE-2014-8962: Heap buffer read overflow...

Detekt - scans your Windows computer for traces of known surveillance spyware

Detekt is a free tool that scans your Windows computer for traces of FinFisher and Hacking Team RCS, commercial surveillance spyware that has been identified to be also used to target and monitor human rights defenders and journalists around the world. In recent years we have witnessed a huge...