8346 matches found
CVE-2018-9581
creationtimestamp| type| source ---|---|--- 2018-11-12 18:41:05+00:00| seen| MISP/5be9c820-b558-4494-a96e-4a4d0a021402 2018-11-12 18:45:50+00:00| seen| MISP/5be9ca0e-c440-4436-9b1a-4a4d0a021402 2018-11-14 14:55:54+00:00| seen| https://t.me/SecLabNews/3629 2018-11-16 14:36:58+00:00| seen|...
GPS Tracking System 2.12 SQL Injection
Exploit Title: GPS Tracking System 2.12 - 'username' SQL Injection Dork: N/A Date: 2018-11-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/gpstracking/ Software Link: https://kent.dl.sourceforge.net/project/gpstracking/gps.zip Version: 2.12 Category: Webapps Test...
GPS Tracking System 2.12 - username SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: GPS Tracking System 2.12 - 'username' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/gpstracking/ Software Link: https://kent.dl.sourceforge.net/project/gpstracking/gps.zip Version:...
Open Ticket Request System (OTRS) File Deletion Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software. Open Ticket Request System OTRS suffers from a file deletion vulnerability that can be exploited by an attacker to delete files through manipulation of submission forms...
Flogging a dead smart horse
Connected stuff is getting everywhere, even in to managing the health of your connected horse. Yes, really. One Friday afternoon after PTP lunchtime drinks in the pub, we bought an ‘Orscana’ horse tracking device. It sat on the shelf for 13 months until after another session in the pub over lunch...
Kaspersky: Kaspersky Password Manager is vulnerable to HTML injection in the browser action pop-up via user name
Note: According to https://www.securityweek.com/kaspersky-adds-password-manager-bug-bounty-program and some other sources, Kaspersky Password Manager is in scope for this program. The program description doesn't reflect this however. Summary There is a stored XSS vulnerability in popover.html the...
CVE-2018-18856
creationtimestamp| type| source ---|---|--- 2018-11-05 19:28:06+00:00| seen| MISP/5be09957-176c-49db-a5c9-07f70a021402...
poppler/pdf_fuzzer: Use-of-uninitialized-value in Parser::makeStream
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5732071763345408 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...
tracking.royalpanda.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-692861 Description| Value ---|--- Affected Website:| tracking.royalpanda.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden...
CVE-2018-10711
creationtimestamp| type| source ---|---|--- 2018-10-29 17:54:56+00:00| seen| MISP/5bd748ef-f174-4809-8a2d-628f0a021402...
Viva Visitor And Volunteer ID Tracking 0.95.1 SQL Injection
Exploit Title: Viva Visitor & Volunteer ID Tracking 0.95.1 - 'fname' SQL Injection Dork: N/A Date: 2018-10-19 Exploit Author: Ihsan Sencan Vendor Homepage: https://viva-visitor.sourceforge.io/ Software Link: https://sourceforge.net/projects/viva-visitor/files/latest/download Version: 0.95.1...
Viva Visitor Volunteer ID Tracking 0.95.1 - fname SQL Injection
Viva Visitor Volunteer ID Tracking 0.95.1 - fname SQL Injection Exploit Title: Viva Visitor & Volunteer ID Tracking 0.95.1 - 'fname' SQL Injection Dork: N/A Date: 2018-10-19 Exploit Author: Ihsan Sencan Vendor Homepage: https://viva-visitor.sourceforge.io/ Software Link:...
harfbuzz/hb-shape-fuzzer: Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5718889451749376 Project: harfbuzz Fuzzer: aflharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Cra...
Microsoft Windows - FSCTL_FIND_FILES_BY_SID Information Disclosure Exploit
Exploit for windows platform in category dos / poc Windows: FSCTLFINDFILESBYSID Information Disclosure Platform: Windows 10 1709, 1803 Class: Information Disclosure / Elevation of Privilege Summary: The FSCTLFINDFILESBYSID control code doesn’t check for permissions to list a directory leading to...
Microsoft Windows - FSCTL_FIND_FILES_BY_SID Information Disclosure
Microsoft Windows - FSCTLFINDFILESBYSID Information Disclosure Windows: FSCTLFINDFILESBYSID Information Disclosure Platform: Windows 10 1709, 1803 Class: Information Disclosure / Elevation of Privilege Summary: The FSCTLFINDFILESBYSID control code doesn’t check for permissions to list a directory...
libreoffice/ww6fuzzer: Heap-use-after-free in SwIndex::Remove
Detailed report: https://oss-fuzz.com/testcase?key=5733739670274048 Project: libreoffice Fuzzer: afllibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61400004ece0 Crash State: SwIndex::Remove...
CVE-2018-12152
creationtimestamp| type| source ---|---|--- 2018-10-10 14:18:00+00:00| seen| MISP/5bbe095e-30f0-4293-8ece-33070a021402...
Design/Logic Flaw
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...
CVE-2015-9273
CVE-2015-9273 affects the WordPress plugin wp-slimstat (Slimstat Analytics) , with an XSS vulnerability exploitable via an HTTP Referer header or a related JavaScript Referer tracking field. Affected versions are prior to 4.1.6.1 . The issue is documented across multiple sources confirming a stor...
