WordPress Carts Guru plugin deserialization vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Carts Guru plugin is an e-commerce plugin used in it. A security vulnerability exists in version 1.4.5 of the WordPress Carts Guru...

CVE-2018-20525

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php...

CVE-2018-20526

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php...

Roxy Fileman Path Traversal Vulnerability

Roxy Fileman is a set of open source file browser for . A path traversal vulnerability exists in the copydir.php file, copyfile.php file, and fileslist.php file in Roxy Fileman version 1.4.5. No details of the vulnerabilities are provided at this time...

Roxy Fileman File Upload Vulnerability

Roxy Fileman is a set of open source file browser for . A security vulnerability exists in the upload.php file in Roxy Fileman version 1.4.5. An attacker can exploit this vulnerability to upload shell code files to the server...

jiacrontab command execution vulnerability

jiacrontab is a timed task management tool with visualization support. A security vulnerability exists in the crontab/task/edit?addr=localhost%3a2000 page in jiacrontab version 1.4.5. A remote attacker can exploit this vulnerability to execute arbitrary commands with the help of 'command' and...

CVE-2018-12042

Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter...

jpegoptim Denial of Service Vulnerability

jpegoptim is an open source JPEG format image compression/optimization tool . A security vulnerability exists in the jpegoptim.c file in version 1.4.5 of jpegoptim, which stems from the program failing to use the 'realloc' and 'free' functions efficiently. A remote attacker can exploit this...

UCMS 1.4.5 File Upload Vulnerability

UCMS is a simple open source content management system. A file upload vulnerability exists in UCMS 1.4.5. An attacker can exploit the vulnerability to directly upload a script Trojan file to obtain a webshell...

October CMS Users Plugin Cross-Site Scripting Vulnerability

October CMS is a Canadian software developer Alexey Bobkov and Australian software developer Samuel Georges developed a set of open source, self-hosted built on the Laravel PHP framework content management system CMS. users also known as Front-end user management is used in one of the front-end...

SQL Injection Vulnerability in the Backend of ucms v1.4.5

UCMS is a simple open source content management system. ucms v1.4.5 ucms/ucms/sadmin/cineditpost.php file SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

Multiple vulnerabilities in the UCMS system

UCMS is a simple open source content management system. A file read and code execution vulnerability exists in UCMS version 1.4.5. An attacker can exploit the vulnerability to read arbitrary files, execute arbitrary code, and gain server privileges...

Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability

Elastic Logstash is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:logstash";...

Elasticsearch Arbitrary File Disclosure Vulnerability

Elasticsearch is the Netherlands Elasticsearch company's set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports the use of JSON over HTTP for data indexing . A security vulnerability exists in Elasticsearch versions prior to 1.5....

TFTPGUI Long Transport Mode Overflow

No description provided by source. Exploit Title: TFTPGUI Long Transport Mode Overflow Date: 5/1/2010 Author: Jeremiah Talamantes Software Link: http://sourceforge.net/projects/tftputil/files/TFTPUtil/TFTPUtil%20Version%201.4.5/TFTPUtilGUIVersion1.4.5BinaryInstaller.exe/download Version: 1.4.5...

CuteNews <= 1.4.5 Admin Password md5 Hash Fetching Exploit

No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // Cutenews = 1.4.5 admin password md5 hash fetching exploit // Version 1.0 // written by Jan...

achievo 1.4.5 - Multiple Vulnerabilities

No description provided by source...

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_payload.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

BASE 'base_qry_main.php' SQLi Vulnerability

BASE is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Wireshark 'bytes_repr_len' Function Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkbytesreprlendosvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ Wireshark 'bytesreprlen' Function Denial of Service Vulnerability Windows Authors: Sooraj KS Copyright:...