CVE-2018-8998

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorx86.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc...

Input validation

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorx86.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4...

CVE-2018-9003

CVE-2018-9003 affects Advanced SystemCare Ultimate (11.0.1.58) via the Monitor_x86.sys driver. The vendor reports a failure to validate input values for IOCTL 0x9c402000, enabling a local attacker to trigger a denial of service (BSOD) or potentially cause other unspecified impacts. The available ...

CVE-2018-9005

CVE-2018-9005 affects Advanced SystemCare Ultimate 11.0.1.58, where the kernel driver file Monitor_win7_x64.sys fails to validate input values from IOCTL 0x9c4060d0. This input validation flaw can allow a local attacker to trigger a denial of service (BSOD) and possibly other unspecified impacts....

CVE-2018-9007

CVE-2018-9007 concerns Advanced SystemCare Ultimate 11.0.1.58, where the Monitor_x86.sys driver fails to validate input from IOCTL 0x9c4060c4. This can enable local users to trigger a denial of service (BSOD) and potentially other unspecified impacts. Documents specify the vulnerable component as...

CVE-2018-9001

CVE-2018-9001 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_win7_x64.sys driver. The issue arises from not validating input values sent through IOCTL 0x9c402000, enabling a local attacker to cause a denial of service (BSOD) and potentially other unspecified impacts. Public connec...

CVE-2018-9002

CVE-2018-9002 affects Advanced SystemCare Ultimate 11.0.1.58, where the kernel driver Monitor_win7_x64.sys mishandles input when processing IOCTL 0x9c4060cc. The root cause is input validation failure in this IOCTL path, enabling a local user to cause a denial of service (BSOD) and potentially ot...

CVE-2018-8998

CVE-2018-8998 affects Advanced SystemCare Ultimate 11.0.1.58 via the driver Monitor_x86.sys. The issue arises from failure to validate input values from IOCTL 0x9c4060cc, enabling local attackers to trigger a denial of service (BSOD) and potentially other unspecified impacts. Publicly documented ...

ultimate-guitar.com XSS vulnerability

Open Bug Bounty ID: OBB-570118 Description| Value ---|--- Affected Website:| ultimate-guitar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Ultimate Member Plugin 2.0 Multiple XSS Vulnerabilities

The WordPress plugin Copyright C 2018 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Ultimate Member <= 2.0 - Multiple XSS

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Multiple XSS security vulnerability...

RISE Ultimate Project Manager SQL Injection Vulnerability

Rise Ultimate Project Manager is a web-based project management system. A SQL injection vulnerability exists in RISE Ultimate Project Manager version 1.9. A remote attacker can exploit this vulnerability by sending the 'search' parameter to the index.php/knowledgebase/getarticlesuggestion/ file t...

Sql injection

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...

CVE-2017-17999

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...

CVE-2017-17999

RISE Ultimate Project Manager 1.9 contains a SQL injection in the knowledge_base get_article_suggestion endpoint. The vulnerability is triggered via the search parameter to index.php/knowledge_base/get_article_suggestion/; an attacker can craft input to execute arbitrary SQL. Public references sh...

CVE-2017-17999

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...

ultimate-guitar.com XSS vulnerability

Open Bug Bounty ID: OBB-538520 Description| Value ---|--- Affected Website:| ultimate-guitar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

RISE 1.9 - search SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 30/12/2017 CVE: CVE-2017-17999 Vendor Homepage: http://fairsketch.com/ Version: 1.9 POST...

RISE 1.9 - 'search' SQL Injection

Exploit Title: RISE Ultimate Project Manager 1.9 - SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 30/12/2017 CVE: CVE-2017-17999 Vendor Homepage: http://fairsketch.com/ Version: 1.9 POST /index.php/knowledgebase/getarticlesuggestion/ HTTP/1.1 Host: localhost...

ALLMediaServer 0.95 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Stack Buffer Overflow in ALLMediaServer 0.95 Exploit Author: Mario Kartone Ciccarelli Contact: https://twitter.com/Kartone CVE: CVE-2017-17932 Thanks to PoC: https://www.exploit-db.com/exploits/43406/ Softwar...