9 matches found
EUVD-2024-43960
Malicious code in bioql PyPI...
Setup only possible with sending user statistics
One of our customers reported an error: panel There is a problem with the setup of the new version of SourceTree 3.0.8. In the last screen the preferences are requested. It is not possible to click "Weiter" Continue without checking the second option. !Preferences.png|thumbnail! But this needs to...
Setup only possible with sending user statistics
One of our customers reported an error: panel There is a problem with the setup of the new version of SourceTree 3.0.8. In the last screen the preferences are requested. It is not possible to click "Weiter" Continue without checking the second option. !Preferences.png|thumbnail! But this needs to...
Rocket.Chat: Blind SQL injection in third-party software, that allows to reveal user statistic from rocket.chat and possibly hack into the rocketchat.agilecrm.com
Hi. I decided to go to static website https://rocket.chat/ and look what is there. I found third-party website request...
WordPress Rich Counter 1.1.5 Cross Site Scripting
Title : Wordpress Rich Counter 1.1.5 Plugin - Cross Site Scripting Risk : Normal Exploit Author : XroGuE Google Dork : inurl:wp-content/plugins/rich-counter/ Plugin Version : 1.1.5 Plugin Name : Rich Counter Plugin Download Link : http://downloads.wordpress.org/plugin/rich-counter.zip Vendor Home...
PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC
No description provided by source. !-- PPStream is the most huge p2p media player in the world. There are two hundred million ppstream users in the world. The vulnerability is exploitable,but I have no time to make it,you could visit my blog for detail.^@^ welcome to http://0dayexpose.blogspot.co...
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid...
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure
source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid credentials. An attacker may employ data that is obtained in this mann...
CVE-2002-2057
TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...