240 matches found
CVE-2018-18927
An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...
Default configuration
A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipsov4optptr function in net/ipv4/cipsoipv4.c leading to a denial-of-service. A certain non-default...
BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)
BEESCMS 4.0 - Cross-Site Request Forgery Add Admin Exploit Title: A CSRF vulnerability exists in BEESCMSV4.0: The administrator can be added arbitrarily. Date: 2018-06-25 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9226389.html Software Link: http://www.beescms.com/...
BEESCMS 4.0 - Cross-Site Request Forgery (Add Admin)
Exploit Title: A CSRF vulnerability exists in BEESCMSV4.0: The administrator can be added arbitrarily. Date: 2018-06-25 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9226389.html Software Link: http://www.beescms.com/ Version: BEESCMS - V4.0 CVE : CVE-2018-12739 A CSRF...
Security Bulletin:Cross-site scripting vulnerability in WebSphere Application Server admin console in IBM Content Collector for Email
Summary IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM API Management (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)
Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by IBM API Management. IBM API Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3194 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a...
Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affect IBM API Management (CVE-2015-4947 CVE-2015-1283 CVE-2015-1788)
Summary There are multiple vulnerabilities in IBM HTTP Server 8.5.5.4 that is used by IBM API Management. IBM API Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-4947 DESCRIPTION: IBM HTTP Server Administration Server could be vulnerable to a stack buffer...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM API Management (CVE-2015-1788)
Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by IBM API Management. IBM API Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an...
BEESCMS V4.0_R_20160525全局变量覆盖导致前台getshell
...
CVE-2018-6522
CVE-2018-6522 concerns the nProtect AVS V4.0 driver, where the IOCTL 0x220408 input is not validated in the TKRgFtXp.SYS component, allowing a local attacker to trigger a denial of service (BSOD) and potentially other impacts. Affected product: nProtect AVS V4.0 prior to 4.0.0.39. The vulnerabili...
CVE-2018-6523
The CVE-2018-6523 issue affects the nProtect AVS driver TKFsAv.SYS in V4.0 before 4.0.0.39. The root cause is unvalidated input from IOCTL 0x22045c, allowing local users to trigger a denial of service (BSOD) and potentially other impact. Public documents do not provide exploitation details beyond...
CVE-2018-6524
In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20...
Design/Logic Flaw
Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Album Lock 4.0 iOS - Directory Traversal Vulnerability
Exploit for iOS platform in category web applications Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability Product & Service Introduction: =============================== Do you have any secret photo and videos in your iPhone? Album Lock can protect your privacy...
Album Lock v4.0 iOS - Directory Traversal Vulnerability
Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...
Album Lock v4.0 iOS - Directory Traversal Vulnerability
Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...
ThisIsWhyImBroke Clone Script 4.0 SQL Injection
Exploit Title: Flippy AffilatePlatform a ThisIsWhyImBroke Clone Script v4.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-affilateplatform-affilate-site-builder-script/ Demo:...
PHPOA V4. 0 /phpoa/upload/index.php arbitrary file upload vulnerability
No description provided by source...