CVE-2018-6290

Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1...

CVE-2018-6291

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1...

JSP Tickets SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions . JSP Tickets component is used in which a set of ticket system components. A SQL injection vulnerability exists in version 1.1...

WordPress Gravity Upload Ajax Plugin Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Gravity Upload Ajax plugin is used in one of the Gravity Forms upload plugin. An arbitrary file upload vulnerabili...

CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

Cross-Site Scripting Vulnerability in SyGuestBook

SyGuestBook is a multifunctional message board system that continues to be developed with php+MySQL. SyGuestBook version 1.1 suffers from a cross-site scripting vulnerability, which is caused by the program's failure to effectively filter user-submitted data. An attacker can exploit the...

Livebox File Upload Vulnerability

Livebox is a multifunctional ADSL modem. This product provides telephony, Internet access and TV playback. A file upload vulnerability exists in Livebox version 1.1. A remote attacker can exploit this vulnerability with specially crafted JavaScript code to upload or download arbitrary configurati...

Buffer overflow

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

CVE-2017-1000218

LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...

CVE-2017-15516

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery CSRF vulnerability which could be used to cause an unintended authenticated action in the user interface...

Mahara Resume Blocktype Cross-Site Scripting Vulnerability

Mahara is an open source e-folder, weblog, resume generator and social networking system. A cross-site scripting vulnerability exists in the resume blocktype in Mahara versions prior to 1.0.13 and 1.1.x prior to 1.1.7, where Mahara fails to properly validate input parameters passed to the resume...

ZCMS JavaServer Pages Content Management System Cross-Site Scripting Vulnerability

ZCMS JavaServer Pages Content Management System is a page content management system . A cross-site scripting vulnerability exists in ZCMS JavaServer Pages Content Management System version 1.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

ICCallLimousine 1.1 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Car Rental Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/limousine-car-hire-script.html Demo:...

Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSMA-17-250-02 Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities that was published September 7, 2017, on the NCCIC/ICS-CERT web site. Independent researcher Scott Gayou has identified eight...

Twitch Tv 1.1, SQL Injection

Twitch TV version 1.1 by Bharat Koriya aindropsinfotech.com, SQL Injection...

Trend Micro Deep Discovery Director Command Injection Vulnerability

Trend Micro Deep Discovery is a protection product from Trend Micro that detects and identifies hard-to-find threats in real time and proposes solutions. director is one of the built-in solutions with the ability to update and upgrade various programs in Deep Discovery. A command injection...

Trend Micro Deep Discovery Director Unverified Backup Vulnerability

Trend Micro Deep Discovery is a protection product from Trend Micro that detects and identifies hard-to-find threats in real time and proposes solutions. director is one of the built-in solutions with the ability to update and upgrade various programs in Deep Discovery. A security vulnerability...

ZvingSoft ZCMS SQL Injection Vulnerability

ZvingSoft ZCMS Zeyuan Web Content Management System is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology from China Zeyuan Software ZvingSoft. The system provides interactive components, visualization topics, content collection, content...

DEBIAN-CVE-2015-5381

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter to the default URI...

PT-2017-9763 · Moxa · Moxa Awk-3131A Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless Access Points version 1.1 Description: An exploitable OS Command Injection issue exists in the web application 'ping' functionality. Specially crafted web form input can cause an OS Command Injection, resulting in...