6072 matches found
Foxit Reader XFA host title Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...
MicroTik RouterOS 6.43rc3 - Remote Root
MicroTik RouterOS 6.43rc3 - Remote Root / Exploit Title: RouterOS Remote Rooting Date: 10/07/2018 Exploit Author: Jacob Baines Vendor Homepage: www.mikrotik.com Software Link: https://mikrotik.com/download Version: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42 Beta: 6.29rc1 - 6.43rc3 Tested on:...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
CVE-2018-18029 affects Navigate CMS. The vulnerability is a Stored XSS in the navigate.php Title field during an edit action. The connected documents confirm the issue exists in Navigate CMS and describe the injection point within the Title field, enabling stored script execution on edit. No expl...
Seqrite End Point Security 7.4 Privilege Escalation
Exploit Title : Seqrite End Point Security v7.4 - Weak Folder Permissions Privilege Escalation Date : 09/13/2018 Exploit Author : Hashim Jawad - @ihack4falafel Vendor Homepage : https://www.seqrite.com/ Tested on : Windows 7 Enterprise SP1 x64 Description: ============ Seqrite End Point Security...
e107 Cross-Site Request Forgery Vulnerability (CNVD-2018-20077)
e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by the e107 team. The system supports a variety of plug-ins and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-site request forgery...
CVE-2018-17081
e107 2.1.9 allows CSRF via e107admin/wmessage.php?mode=&action=inline&ajaxused=1&id= for changing the title of an arbitrary page...
Cross site request forgery (csrf)
e107 2.1.9 allows CSRF via e107admin/wmessage.php?mode=&action=inline&ajaxused=1&id= for changing the title of an arbitrary page...
CVE-2018-17081
e107 2.1.9 allows CSRF via e107admin/wmessage.php?mode=&action=inline&ajaxused=1&id= for changing the title of an arbitrary page...
Joomla! Questions 1.4.3 SQL Injection
Exploit Title: Joomla! Component Questions 1.4.3 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://extensiondeveloper.com/ Software Link: https://extensions.joomla.org/extensions/extension/communication/question-a-answers/questions/ Version: 1.4.3 Category: Webapps Tested on:...
Subsonic cross-site scripting vulnerability (CNVD-2018-20097)
Subsonic is a media file hosting platform developed and maintained by software developer Sindre Mehus. A cross-site scripting vulnerability exists in generalSettings in Subsonic version 6.1.1. A remote attacker can exploit this vulnerability by sending the 'title' and 'subtitle' parameters to the...
Staubli Jacquard Industrial System JC6 Shellshock Vulnerability
Staubli Jacquard Industrial System JC6 suffers from a bash environment variable handling code injection vulnerability. Exploit Title: Staubli Jacquard Industrial System | GNU Bash Environment Variable Handling Code Injection Shellshock Exploit Author: t4rkd3vilz Vendor Homepage:...
CVE-2018-17003
In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveylstitle parameter to /index.php?r=admin/survey/sa/insert...
CVE-2018-14690
An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title and subtitle parameters to generalSettings.view that could be used to steal session information of a victim...
LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2019-31188)
LimeSurvey formerly known as PHPSurveyor is an open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection functions. appendix is one of the appendix components. A cross-site scripting vulnerability...
CVE-2018-17140
The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a qlinsert action to wp-admin/admin.php...
Wordpress Survey & Poll 1.5.7.3 Plugin - sss_params SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sssparams' SQL Injection Exploit Author: Ceylan Bozogullarindan Vendor Homepage: http://modalsurvey.pantherius.com/ Software Link:...