Apache Syncope Information Disclosure Vulnerability

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. A security vulnerability exists in Apache Syncope versions 1.2.x...

Apache Syncope Remote Code Execution Vulnerability

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. A security vulnerability exists in Apache Syncope versions 1.2.x...

phpIPAM < 1.2 Multiple XSS Vulnerabilities

phpIPAM is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

XBruteForcer - CMS Brute Force Tool (WP, Joomla, DruPal, OpenCart, Magento)

Brute Force Tool: WP , Joomla , DruPal , OpenCart , Magento Simple brute force script 1 WordPress Auto Detect Username 2 Joomla 3 DruPal 4 OpenCart 5 Magento 6 All Auto Detect CMS Usage Short Form | Long Form | Description ---|---|--- -l | --list | websites list -p | --passwords | Passwords list...

Default credentials

Dell EMC SupportAssist Enterprise version 1.1 creates a local Windows user account named "OMEAdapterUser" with a default password as part of the installation process. This unnecessary user account also remains even after an upgrade from v1.1 to v1.2. Access to the management console can be achiev...

boot2docker Code Execution Vulnerability

boot2docker is a distribution of lightweight Linux that runs exclusively on Docker containers. A security vulnerability in the Docker daemon in boot2docker 1.2 and earlier versions stems from the program failing to properly open unauthenticated TCP links by default. A remote attacker could exploi...

Flexible Poll SQL Injection Vulnerability

Flexible Poll is a dynamic online poll management system. A SQL injection vulnerability exists in Flexible Poll version 1.2. A remote attacker can inject SQL commands by sending the 'id' parameter to the index.php or mobilepreview.php file...

Update Rollup 14 for System Center 2012 R2 Orchestrator

Update Rollup 14 for System Center 2012 R2 Orchestrator Introduction This article describes the issues that are fixed in Update Rollup 14 for Microsoft System Center 2012 R2 Orchestrator. This article also contains the installation instructions for this update. Issues that are fixed Update rollup...

Simple ASC Content Management System Cross-Site Scripting Vulnerability

Simple ASC Content Management System is a web content management system. The system uses an Access database and allows you to manage the content of your website through an administration panel. A cross-site scripting vulnerability exists in the location field of the 'sign' function in Simple ASC...

Red Hat JBoss Application Server Password Information Disclosure Vulnerability

Red Hat JBoss Application Server AS, also known as WildFly is the United States of America Red Hat Red Hat a JavaEE-based open source application server , it has a startup ultra-fast , lightweight , modular design , hot and parallel deployment , concise management , domain management and the firs...

Apple Support Analytics Information Disclosure Vulnerability

Apple Support for iOS is Apple's online support application for iOS.The Analytics component is one of the analytics components. A security vulnerability exists in the Analytics component of Apple Support prior to version 1.2 for iOS, which originates from the program using HTTP instead of HTTPS t...

BlackCat CMS Arbitrary File Upload Vulnerability

BlackCat CMS is a PHP5, HTML5 content management system. An arbitrary file upload vulnerability exists in BlackCat CMS version 1.2, which allows remote attackers to upload arbitrary files via the media upload function in backend/media/ajaxupload.php...

CVE-2017-9609

Cross-site scripting XSS vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php...

Synology Video Station Cross-Site Scripting Vulnerability

Synology Video Station is a video manager from Synology, a Chinese company. A cross-site scripting vulnerability exists in Synology Video Station version 1.2 before 1.2-0455, version 1.5 before 1.5-0772, and version 1.6 before 1.6-0847. A remote attacker can exploit this vulnerability to inject...

Authentication flaw

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions,...

Departmental Store Management System 1.2 - SQL Injection

Exploit Title: Pasal - Departmental Store Management System v1.2 - SQL Injection Google Dork: N/A Date: 17.03.2017 Vendor Homepage: http://webstarslab.com Software : http://webstarslab.com/products/pasal-departmental-store-management-system/ Demo:...

Fashmark eCommerce 1.2 SQL Injection

Exploit Title: Fashmark - eCommerce Script v1.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/fashmark Demo: http://demo.ncryptedprojects.com/fashmark-ent/ Version: 1.2 Tested on: Win7 x64, Kali Linux x64 Exploit...

CVE-2016-6884

TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service out-of-bounds read via a crafted message...

Design/Logic Flaw

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

Design/Logic Flaw

An issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements for the OmniView web application may allow an attacker to gain access by brute forcing account passwords...