EUVD-2007-2665

Malware in sbrugna...

EUVD-2017-12271

Malware in sbrugna...

U.S. Dept Of Defense: IDOR leaking PII data via VendorId parameter

Description: Dear DoD, I found one bug on your domain from Hack US program: █████ It's IDOR bug. Make sure to know that I didn't test many funcs here for IDOR. I didn't test for ATO Account Takeover. But you should fix this. Here's the PoC: ██████████ Thank you DoD! Impact An attacker could steal...

FortiOS IKE VendorID version information disclosure

The FortiOS IKE packets which include the Vendor ID embed the FortiOS build version number...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

Information disclosure

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets...

Pre ADS Portal - cid SQL Injection

Pre ADS Portal - cid SQL Injection Mega ADS Portal cid Remote SQL Injection Vulnerability ======================================================== Author: Hussin X Home : iq-ty.com/vb email: darkangelg85atYahooDoTcom Vendor : http://www.preprojects.com/ads.asp Exploit:...

Sql injection

SQL injection vulnerability in includes/funcsvendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendorinfo cmd action to censura.php...

censura-sql.txt

============================================== Censura v1.15.04 vendorid Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...