Apache Syncope Remote Code Execution Vulnerability

Apache Syncope is the United States Apache Apache Software Foundation's set of open source digital identity management system for use in enterprise environments. The system supports identity management, role configuration and more. A security vulnerability exists in Apache Syncope versions 1.2.x...

UBUNTU-CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series...

Pivotal Application Service Apps Manager for PCF Information Disclosure Vulnerability

Pivotal Application Service is a suite of application management software from Pivotal Software, U.S.A. Apps Manager for PCF is one of the application managers for PCF. \ A security vulnerability exists in Apps Manager for PCF in Pivotal Application Service versions 1.11.x before 1.11.26, 1.12.x...

CVE-2018-0787

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability"...

Design/Logic Flaw

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a...

Magento Cross-Site Scripting Vulnerability

Magento is an open source PHP e-commerce system from Magento, which provides permission management, search engine and payment gateway. A cross-site scripting vulnerability exists in Magento versions 2.0 through 2.0.18. The vulnerability is due to the system failing to effectively filter user inpu...

CVE-2018-7536

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions only one regular expression for Django...

Lutron Quantum BACnet Integration Sensitive Information Disclosure Vulnerability

Lutron Quantum BACnet Integration is a lighting control system from Lutron Electronics, USA. A security vulnerability exists in Lutron Quantum BACnet Integration version 2.0 using firmware version 3.2.243. A remote attacker can exploit the vulnerability by sending a /DbXmlInfo.xml request to obta...

Code injection

In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database...

Microsoft ASP.NET Core CVE-2018-0785 Cross Site Request Forgery Vulnerability

Description Microsoft ASP.NET Core is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks. Technologies Affected Microsoft ASP.NET Core...

Tine Addressbook Cross-Site Scripting Vulnerability

Tine is a set of open source component solutions. The solution provides e-mail, address book and calendar features. addressbook is one of the address book components. A cross-site scripting vulnerability exists in Addressbook in Tine version 2.0 2017.02.4. A remote attacker could exploit the...

Microsoft ASP.NET Core CVE-2017-11879 Open Redirection Vulnerability

Description Microsoft ASP.NET Core is prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be...

WordPress Pinfinity theme <=1.9.2 - Reflected Cross-Site Scripting (XSS) vulnerability

WordPress Pinfinity theme version 1.9.2 and several earlier versions are vulnerable to Reflected Cross-Site Scripting XSS. Proof of concept url sample: https://website.com/wp/?s=alert1 Solution Update the WordPress Pinfinity theme to the latest available version at least version 2.0...

PHP Jokesite 2.0 - joke_id SQL Injection

PHP Jokesite 2.0 - jokeid SQL Injection Exploit Title: PHP Jokesite 2.0 - 'jokeid' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phpjokesite2/ Demo: http://www.scriptdemo.com/php-jokesite/ver2.0/...

PHP Jokesite 2.0 - 'joke_id' SQL Injection

Exploit Title: PHP Jokesite 2.0 - 'jokeid' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.scriptdemo.com/ Software Link: http://www.scriptdemo.com/details/phpjokesite2/ Demo: http://www.scriptdemo.com/php-jokesite/ver2.0/ Version: 2.0 Category: Webapps Tested on:...

Wireshark 2.2.x < 2.2.8 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.8 advisory. - In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust...

Houkokusyo Sakusei Shien Tool installer Arbitrary Code Execution Vulnerability

Houkokusyo Sakusei Shien Tool is a report generation support tool. installer is one of the installation programs. An arbitrary code execution vulnerability exists in the installer version 3.0.2 and versions 2.0 and later of the Houkokusyo Sakusei Shien Tool. An attacker can exploit this...

EulerOS 2.0 SP1 : libreswan (EulerOS-SA-2016-1078)

According to the version of the libreswan package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A traffic amplification flaw was found in the Internet Key Exchange version 1 IKEv1 protocol. A remote attacker could use a libreswan server with...

Social Directory Script 2.0 - SQL Injection

Exploit Title: Social Directory Script 2.0 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.phponly.com/ Software: http://www.phponly.com/Social-Directory.html Demo: http://www.phponly.com/demo/link/ Version: 2.0 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihs...

Yacht Listing Script 2.0 - SQL Injection

Yacht Listing Script 2.0 - SQL Injection Exploit Title: Yacht Listing Script v2.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/yacht-listing-script/ Demo:...