Stack overflow

Codedoc v3.2 has a stack-based buffer overflow in addvariable in codedoc.c, related to codedocstrlcpy...

Faraday v3.2 - Collaborative Penetration Test and Vulnerability Management Platform

Here is a list of all the goodies in Faraday v3.2: Workspace names- with numbers! With this new version, workspaces’ names are now allowed to start with numbers before they could only start with letters. Search unconfirmed vulns In this version was added the filter to be able to show unconfirmed...

CVE-2018-11554

The forgotten-password feature in index.php/member/reset/resetemail.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force...

CVE-2018-11554

The forgotten-password feature in index.php/member/reset/resetemail.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force...

QID 86725 “F5 BIG-IP Load Balancer Internal IP Address Disclosure”

QID 86725 “F5 BIG-IP Load Balancer Internal IP Address Disclosure Vulnerability” will be marked as a PCI Fail as of May 1, 2018 in accordance with its CVSS score. F5 BIG IP encodes private IP addresses in the persistent cookies, which could be collected by the attacker and decoded back. The...

PCI DSS v3.2 & Exposing Session ID in URL

Passing the session ID in the URL such as QID 150068 “Session ID in URL” will be marked as a Fail for PCI as of April 15, 2018 in accordance with PCI DSS v3.2. QID 150068 is a PCI Fail according to PCI DSS v3.2 Requirement 6.5.10: 6.5.10 Examine software development policies and procedures and...

Kemana Directory Version 3.2 Build 20170903 Database Disclosure

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1-=-=-=-=-=-=-=-=-=-=-=-=- | Title : Kemana Directory Version 3.2 build 20170903 Database Disclosure Vulnerability | Author : indoushka | email : [email protected] | vendor : http://www.c97.net/ | Tested on : windows 8....

PCI DSS v3.2 & Migrating from SSL and Early TLS v1.1

SSL & Early TLS vulnerabilities such as QID 38628 “SSL/TLS Server supports TLSv1.0”\ will be marked as a Fail for PCI as of May 1, 2017 in accordance with the PCI DSS v3.2. For existing implementations, merchants will be able to submit a PCI False Positive / Exception Request and provide proof of...

Article Directory Script Seo 3.2 - Improper Access Restrictions

Article Directory Script Seo 3.2 - Improper Access Restrictions Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://www.e-soft24.com/ Script Name: Article Directory Script Seo Script Version: V3.2 Script Buy Now:...

Article Directory Script Seo 3.2 Insecure Direct Object Reference

Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://www.e-soft24.com/ Script Name: Article Directory Script Seo Script Version: V3.2 Script Buy Now: http://www.e-soft24.com/article-directory-script-seo-p-338.html Author: Adeghsan Aencan Author Web: http://ihsan.ne...

ZMS v3.2 CMS - Client Side Cross Site Web Vulnerabilities

Document Title: =============== ZMS v3.2 CMS - Client Side Cross Site Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1890 Release Date: ============= 2016-07-28 Vulnerability Laboratory ID VL-ID: ====================================...

PHPYun v3.2 /model/ajax.class.php SQL注入漏洞

/model/index.class.phpfunction exchangesaction $GET'page'=$POST'page'; $where=$POST'jobwhere'." ORDER BY lastupdate DESC"; $urlarr'page'="page"; $pageurl=$this-url"index","index",$urlarr; $rows=$this-getpage"companyjob",$where,$pageurl,6,"id,name,uid,salary,edu,lastupdate"; if$rows&&isarray$rows...

PHPYun v3.2 /member/user/model/resume.class.php SQL注入漏洞

No description provided by source...

PHPYun v3.2 /ask/model/index.class.php SQL注入漏洞

/ask/model/index.class.php$iids=$isset'ids'.','.$POST'id'; $nid=$this-obj-updateonce"attention",array"ids"=$iids,array"id"=$isset'id'; if$nid $data'uid'=$this-uid; $data'content'=$content; $data'ctime'=time; $this-obj-insertinto"friendstate",$data; echo '1'; else echo '0'; $iids拼接用戶POST的id。...

phpyun v3.2 (20141222) 前台注入 #4

简要描述： 20141222 详细说明： member\user\model\privacy.class.php 中 function indexaction ifintval$POST'status' $this-obj-DBupdateall"resume","$POSTtype='".intval$POST'status'."'","uid='".$this-uid."'";//没对post来的做判断 直接带入key中 造成了注入 $this-obj-memberlog"设置简历是否公开"; 这里我们首先先创建一个简历 然后容易直接出数据。...

Yidacms v3.2 /Yidacms/user/user.asp 远程密码修改漏洞

No description provided by source...

Yidacms v3.2 /Yidacms/user/user.asp 信息泄漏漏洞

漏洞相关文件：/Yidacms/admin/adminsyscome.asp%@language="vbscript"codepage="65001"% % '※※※※※※※※※※※※※※※※※※※※※※※※※※※※※※※※ '※ ※ '※ 易达CMS企业建站系统、易达WAP手机建站系统 ※ '※ 软件由哈尔滨伟成科技有限公司开发完成 ※ '※ 著作权登录号：2012SR001955 网址：http://yidacms.com ※ '※ 软件享有著作权，未经公司同意禁止去除版权信息或出售源码。 ※ '※ ※ '※※※※※※※※※※※※※※※※※※※※※※※※※※※※※※※※ option...

FuseTalk Forums 3.2 Cross Site Scripting

Exploit Title: FuseTalk Forums v3.2 Cross Site Scripting Date: 2.01.2012 Author: Sony Software Link: http://www.fusetalk.com/ Google Dorks: inurl:/login.cfm?windowed=yes Version: v3.2, maybe another version Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Omerportal 3.2 Cross Site Scripting

´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...

Elite Gaming Ladders v3.2 CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Elite Gaming Ladders v3.2 CMS SQL Injection Vulnerability ========================================================= Author: SpAmBoT Software Link: http://eliteladders.com/ Version: v3.2...