142 matches found
CVE-2018-18805
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...
Sql injection
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...
CVE-2018-18805
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...
CVE-2018-18805
CVE-2018-18805 affects Point Of Sales 1.0 (VB.Net, MySQL) where the login form (LoginForm1.vb) builds a SQL query by string concatenation, enabling SQL injection. Public PoCs and exploits (Exploit DB, PacketStorm) demonstrate attacker can retrieve/modify backend data via the login screen. Connect...
CVE-2018-18805: Improper Neutralization of Special Elements used in an SQL Command
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb...
PT-2018-14666
Name of the Vulnerable Software and Affected Versions Point Of Sales version 1.0 Description The issue allows SQL injection via the login screen, related to LoginForm1.vb. Recommendations For version 1.0, consider restricting access to the login screen until a patch is available. As a temporary...
Point of Sales (POS) in VB.Net MySQL Database 1.0 - SQL Injection
Point of Sales POS in VB.Net MySQL Database 1.0 - SQL Injection Exploit Title: Point of Sales POS in VB.Net MySQL Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...
The vulnerability of VBScript script handlers in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka “Windows VBScript Engine Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...
Threat Analysis: Malicious Microsoft Word Documents Being Used in Targeted Attack Campaigns
A Microsoft Word document .doc believed to be malicious was recently submitted to Carbon Black’s Threat Analysis Unit TAU. The submitting organization did not feel that that document and subsequent payload was fully executing in their analysis environment, and questioned whether or not it was...
vBulletin 5 - cacheTemplates Remote Arbitrary File Deletion
vBulletin 5 - cacheTemplates Remote Arbitrary File Deletion SSD Advisory – vBulletin cacheTemplates Unauthenticated Remote Arbitrary File Deletion Source: https://blogs.securiteam.com/index.php/archives/3573 Vulnerability Summary The following advisory describes a unauthenticated deserialization...
Threat Round-up for July 28 - August 4
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between July 28 and August 04. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior characteristic...
VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Exploit
Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening...
CVE-2016-0141
The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."...
Hancitor Malware Shifts Infection Strategies
Researchers said a new variant of the Hancitor downloader has shifted tactics and adopted new dropper strategies and obfuscation techniques on infected PCs. Researchers at Palo Alto Networks are currently tracking the biggest push of the Hancitor family of malware since June that it says has...
Remote Control Backdoor Vulnerability in Canon Canon vb-c60 Camera
Canon Japan is a Japanese company dedicated to imaging, optical and office automation products, including cameras, camcorders, copiers, fax machines, image scanners and printers. A remote control backdoor vulnerability exists in the Canon vb-c60 camera, which allows an attacker to send a get...
VB Marketing 'tseekdir.cgi' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27475/info VB Marketing is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include loc...
MobPartner Counter - Remote File Upload Vulnerability
No description provided by source. MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : MobPartner Counter upload files The exploit : http://localhost/path/upload.php edit shell...
MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit
No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...
The Uploader 2.0 - Remote File Upload Vulnerability
No description provided by source. ======================================================================================================= Script Name : The Uploader 2.0 Language : php Author : Master Mind Home : www.vbspiders.com ============================================== Exploit : example:...