Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Business Services Fabric: CVE-2015-1920

Summary WebSphere Application Server is shipped as a component of WebSphere Business Services Fabric. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security...

Security Bulletin: Multiple security vulnerabilities have been identified in WebSphere Message Broker shipped with WebSphere Remote Server

Summary WebSphere Message Broker is shipped as a component of WebSphere Remote Server. Information about multiple security vulnerabilities affecting WebSphere Message Broker has been published in a security bulletin. Vulnerability Details For vulnerabilities details, see the security bulletin...

IBM WebSphere Cast Iron Security Bulletin: Security vulnerability in IBM JRE 6 and IBM JRE 7

Abstract Security vulnerability exist in the IBM Java Runtime Environment component of WebSphere Cast Iron in IBM JRE 6.0 SR15 FP1 and earlier and IBM JRE 7.0 SR6 FP1 and earlier Content VULNERABILITY DETAILS There is a security vulnerability in the IBM Java Runtime Environment used in WebSphere...

IBM WebSphere Cast Iron Security Bulletin: Multiple security vulnerabilities in IBM JRE 6 and IBM JRE 7

Abstract Multiple security vulnerabilities exist in the IBM Java Runtime Environment component of WebSphere Cast Iron in IBM JRE 6.0 SR15 and earlier and IBM JRE 7.0 SR5 and earlier Content VULNERABILITY DETAILS There are multiple security vulnerabilities in the IBM Java Runtime Environment used ...

Cross site request forgery (csrf)

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP...

CVE-2018-10222

CVE-2018-10222 concerns idreamsoft iCMS V7.0. A CSRF vulnerability exists that can cause adding a Column via the request path /admincp.php?app=article_category&do=save&frame=iPHP. The connected CNVD and CNVD-derived records describe this same CSRF issue in iCMS 7.0, with no public details on affe...

Monstra CMS 3.0.4 Code Execution

Exploit title : Monstra CMS = SetHandler application/x-httpd-php SetHandler application/x-httpd-php-source Deny access to raw php sources by default To re-enable it's recommended to enable access to the files only in specific virtual host or directory Require all denied Deny access to files witho...

CVE-2017-15935

Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file...

CVE-2017-15934

Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter...

CVE-2017-15936

Artica Pandora FMS 7.0 contains a Cross‑Site Scripting vulnerability. An attacker with write permission can create an agent carrying an XSS payload, which executes when a user visits the agent definitions page. The underlying root cause is not specified in the provided documents. The exact affect...

ClipShare 7.0 SQL Injection

Exploit Title: ClipShare v7.0 - SQL Injection Date: 2017-10-09 Exploit Author: 8bitsec Vendor Homepage: http://www.clip-share.com/ Software Link: http://www.clip-share.com/ Version: 7.0 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected] Contact: https://twitter.com/8bitsec Relea...

vbmcms v7.0 index.php 参数userid SQL注入漏洞

No description provided by source...

qibocms v7.0 任意文件下载漏洞

No description provided by source...

Infosea GLIS V7.0&V9.0 Sql Injection

简要描述： 清大新洋图书管理系统V7.0和V9.0版存在注入漏洞 详细说明： 写了那么多洞儿也没来一个大厂商呢。好伤心呀！我就不像某些人一样一个系统十个注入点分开刷了来一个首页可好啊？ v9.0的是oracle数据库、v7.0的似mssql数据库 官网案例：http://www.infosea.com.cn/yonghu.html（有点吓人） GLIS V7.0默认风格： GLIS V9.0默认风格： 两处SQL注入： 第一处：/opac/ckgc.jsp?kzh= GLIS V9.0版本 第二处：/opac/fljs/fllist.jsp?flh= GLIS V7.0版本 漏洞证明：...

BP Blog 6.0/7.0/8.0/9.0 - Remote Database Disclosure Vulnerability

No description provided by source. BP Blog V6.0 & V7.0 & V8.0 & V9.0 Database Disclosure Vulnerability I BP Blog V6.0 & V7.0 & V8.0 & V9.0 I Script Website : http://blog.betaparticle.com/ I Found by : Dxil I Contact : [email protected] D powered by BP Blog 7.0 or powered by BP Blog 8.0 E...

Apple iOS v7.0 iPad with Face Time - Privacy Image Issue

Document Title: =============== Apple iOS v7.0 iPad with Face Time - Privacy Image Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1091 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1087 Video: http://www.youtube.com/watch?v=7acWAEZpbgs Release Date...

Apple iOS v7.0 iPad with Face Time - Privacy Image Issue

Document Title: =============== Apple iOS v7.0 iPad with Face Time - Privacy Image Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1091 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1087 Video: http://www.youtube.com/watch?v=7acWAEZpbgs Release Date...

Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day

Exploit for windows platform in category web applications Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day Google Dork: N/A Date: 2012-12-03 Exploit Author: Nin3 Vendor Homepage: http://advantech.com.tw Version: 7.0 Build Number 0501.1111.0402.0000 Tested on: Windows CVE :...

KesionCMS section of the news site management system to V7. 0 0day-vulnerability warning-the black bar safety net

Pass to kill KesionCMS v7. 0 version, use conditions must be based on iis7. 0 erection. （A bit tasteless） it!!! The first step: registered users: http://www.. com /? do=reg Second step: access to photo album directly to the point of bulk upload fake good the jpg in a word, do not select a picture...

KesionCMS section flood site management system V7. 0 0day-vulnerability warning-the black bar safety net

Pass to kill KesionCMS v7. 0 version, use conditions must be based on iis7. 0 erection. （A bit tasteless） it!!! The first step: registered users: http://127.0.0.1/?do=reg Second step: access to photo album directly to the point of bulk upload fake good the jpg in a word, don't select a picture...