176 matches found
Curfew e-Pass Management System 1.0 SQL Injection Vulnerability
Curfew e-Pass Management System version 1.0 suffers from multiple remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to gh1mau. Exploit Title: Curfew e-Pass Management System 1.0 Multiple SQL Injection Vulnerabilities Exploit Author: Mucahit...
Curfew e-Pass Management System 1.0 SQL Injection
Exploit Title: Curfew e-Pass Management System 1.0 Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 04.08.2020 Exploit Author: Mucahit Karadag Vendor Homepage: https://products.phpgurukul.com/product/curfew-e-pass-management-system-project-report/ Software Link:...
Exploit for Insertion of Sensitive Information into Log File in Canonical Subiquity
CVE-2020-11932 :bug::mag: Check CVE-2020-11932 and test for h...
Canonical Subiquity Log Message Disclosure Vulnerability
Canonical Subiquity is an Ubuntu server installer from Canonical UK. A log information disclosure vulnerability exists in Canonical Subiquity used in Ubuntu Server. The vulnerability stems from the abnormal output of log files from a networked system or product. No details of the vulnerability ar...
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
Code injection
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-11932 Subiquity server installer logged LUKS full disk encryption password
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-11932
CVE-2020-11932 affects the Subiquity installer for Ubuntu Server. It discloses that the LUKS full-disk encryption password, entered during setup, could be logged in plaintext within installer-related logs (e.g., curtin-install.log, installer-journal.txt, curtin-install-cfg.yaml). The available co...
CVE-2020-11932
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
CVE-2020-11932: Insertion of Sensitive Information into Log File
It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered...
PT-2020-12930
Name of the Vulnerable Software and Affected Versions Ubuntu Server versions prior to Subiquity 20.05.2 Description A security issue was discovered in the Subiquity installer for Ubuntu Server, where the LUKS full disk encryption password was logged if one was entered. This issue was caused by th...
addressbook 9.0.0.1 SQL Injection
Title: addressbook 9.0.0.1 - 'id' SQL Injection Date: 2020-04-01 Author: David Velazquez a.k.a. d4sh&r000 vulnerable application: https://sourceforge.net/projects/php-addressbook/files/latest/download vulnerable version: 9.0.0.1 Discription: addressbook 9.0.0.1 time-based blind SQL injection Test...
addressbook 9.0.0.1 - (id) SQL Injection Exploit
Exploit for php platform in category web applications Title: addressbook 9.0.0.1 - 'id' SQL Injection Author: David Velazquez a.k.a. d4sh&r000 vulnerable application: https://sourceforge.net/projects/php-addressbook/files/latest/download vulnerable version: 9.0.0.1 Discription: addressbook 9.0.0....
addressbook 9.0.0.1 - 'id' SQL Injection
Title: addressbook 9.0.0.1 - 'id' SQL Injection Date: 2020-04-01 Author: David Velazquez a.k.a. d4sh&r000 vulnerable application: https://sourceforge.net/projects/php-addressbook/files/latest/download vulnerable version: 9.0.0.1 Discription: addressbook 9.0.0.1 time-based blind SQL injection Test...
ubuntu-server.js Code Execution
The vulnerability of the ubuntu-server.js component of the React Native Desktop development platform is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Remote code execution
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
CVE-2019-12164
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
CVE-2019-12164
Affected software: Status React Native Desktop prior to v0.57.8_mobile_ui (ubuntu-server.js). Vulnerability: remote code execution via ubuntu-server.js. Impact & scope: reported RCE in the desktop component; CVE-2019-12164. Mitigation status: no remediation details provided in the connected docum...
JShielder v2.4 - Hardening Script For Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark G
JSHielder is an Open Source Bash Script developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application or services. This tool automates the process of installing all the necessary packages to host a web application and Hardening a Linux...