CVE-2018-6004

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

CVE-2018-6004

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

Sql injection

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

CVE-2018-6004

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...

CVE-2018-6004

CVE-2018-6004 describes an SQL Injection in the Joomla! extension File Download Tracker 3.0 . The vulnerability occurs in the component’s input handling via the Dynfield[phone] or sess parameters, allowing an attacker to inject SQL and potentially compromise data. Public references in the connect...

Joomla File Download Tracker 3.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component File Download Tracker 3.0 - SQL Injection Vendor Homepage: http://techsolsystem.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/downloads/file-download-tracker/...

Joomla! Component File Download Tracker 3.0 - SQL Injection

Joomla! Component File Download Tracker 3.0 - SQL Injection Exploit Title: Joomla! Component File Download Tracker 3.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techsolsystem.com/ Software Link:...

Joomla! Component File Download Tracker 3.0 - SQL Injection

Exploit Title: Joomla! Component File Download Tracker 3.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techsolsystem.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/downloads/file-download-tracker/ Version: 3.0 Category:...

MantisBT Information Disclosure Vulnerability (CNVD-2018-05515 )

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A security vulnerability exists in the viewallbugpage.php file in versions of MantisBT prior to 2018-02-02. A remote...

Bug bounty left over (and rant) Part III (Google and Twitter)

tl;dr in this blog post I am going to talk about some bug bounty left over with a little rant. Here you can find bug bounty left over part I and II Here you can find bug bounty rant part I and II Introduction In one of my previous post I was saying that: "The rule 1 of any bug hunter... is to hav...

HPE iLO 4 2.53 - Add New Administrator User

HPE iLO 4 2.53 - Add New Administrator User !/usr/bin/env python """ Exploit trigger was presented @reconbrx 2018 Vulnerability found and documented by synacktiv: https://www.synacktiv.com/posts/exploit/rce-vulnerability-in-hp-ilo.html Original advisory from HP:...

Debian: Security Advisory (DSA-4104-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-6462

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document...

CVE-2018-6462

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document...

CVE-2018-6462

Tracker PDF-XChange Viewer and Viewer AX SDK prior to 2.5.322.8 are affected by a vulnerability in YCC to RGB color-space conversion that uses 1 bpc instead of 8 bpc, allowing remote code execution via a crafted PDF document. Affected products: Tracker PDF-XChange Viewer and Viewer AX SDK. Root c...

CVE-2018-6462

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document...

CVE-2018-6308

Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the defaultcurrencyname parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate...

[SECURITY] [DSA 4091-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4091-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4091-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4091-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4089-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4089-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 16, 2018 https://www.debian.org/security/faq -...