UVI-2021-1000335 PCI: endpoint: Fix NULL pointer dereference for ->get_features()

PCI: endpoint: Fix NULL pointer dereference for -getfeatures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

Arbitrary file deletion

Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...

CVE-2020-18888

Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...

CVE-2020-18888

The CVE-2020-18888 entry concerns puppyCMS v5.1 with an Arbitrary File Deletion vulnerability. According to the documents, a remote attacker can delete files/folders via the vulnerable endpoint /admin/functions.php, due to insufficient path validation/restrictions. The issue is described across m...

CVE-2020-18889

Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...

CVE-2020-18890

CVE-2020-18890 affects puppyCMS v5.1 (puppyCMS, puppetCMS) with an RCE due to insecure permissions. The vulnerability allows a remote attacker to gain shell access via /admin/functions.php. Root cause: insecure file/permission handling in the admin function. Impact is described as remote code exe...

CVE-2020-18890

Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...

CVE-2020-18889

Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE...

CAM UnZip 5.1 - .ZIP File Directory Traversal

CAM UnZip 5.1 - .ZIP File Directory Traversal + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type:...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Exploit for windows platform in category local exploits + Credits: hyp3rlinx Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE Reference: ============== N/A Vulnerability Details:...

Fedora 23 : qemu-2.4.0-1.fc23 (2015-13358)

Rebased to version 2.4.0 Support for virtio-gpu, 2D only Support for virtio-based keyboard/mouse/tablet emulation x86 support for memory hot-unplug - ACPI v5.1 table support for 'virt' board CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path bz 1230536 CVE-2015-3214: i8254: out-of-...

hdwiki v5.1 /control/edition.php SQL注入漏洞

No description provided by source...

dedecms v5.1 /tag.php SQL注入漏洞

No description provided by source...

Simple SQLi Dumper v5.1 - Tool to find bugs, errors or vulnerabilities in MySQL database

SSDp is an usefull penetration tool to find bugs, errors or vulnerabilities in MySQL database. Functions SQL Injection Operation System Function Dump Database Extract Database Schema Search Columns Name Read File read only Create File read only Brute Table & Column Download Simple SQLi Dumper v5....

HDWiKi V5.1 盲注及xss

简要描述： HDWiki 在经过前面的大牛洗礼之后，变得越来越安全了，小菜我也只能找到几个盲注和xss而已 PS：求别忽略 PSS:漏洞是自己的，rank是剑心的，所以.....你懂得 。 详细说明： 在经过前面的大牛洗礼之后，变得越来越安全了，get被不分青红皂白的过滤掉一堆关键字，get注入几乎是不大可能的了，所以我只找了post 1 control/user.php 177 function doaegis 178 $id=$this-post'id'; //vulnerable 179 ifempty$id 180 $this-message-1,'',2; 181 182...

DataWatch Monarch Business Intelligence (BI) v5.1 admin section stored cross-site scripting

DataWatch Monarch BI v5.1 admin section stored cross-site scripting Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a stored...

DataWatch Monarch BI v5.1 admin section reflected cross-site scripting

Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a reflected cross-site scripting vulnerability because it fails to sufficientl...

DataWatch Monarch Business Intelligence (BI) 5.1 Admin Cross Site Scripting

Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a reflected cross-site scripting vulnerability because it fails to sufficientl...