MAL-2022-7050 Malicious code in wb-dev-build-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f5b5cbbf6264d12fe4081a448996f9e5fc60597841f5b76b38308c4b24e82ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

wb-aktuell.de Improper Access Control vulnerability OBB-2408823

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wb-agent.de Improper Access Control vulnerability OBB-2403400

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Vulnerability of the komeda_wb_connector_add() function (drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the komedawbconnectoradd function drivers/gpu/drm/arm/display/komeda/komedawbconnector.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause service failures...

Linux kernel memory leak vulnerability (CNVD-2019-40151)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the komedawbconnectoradd function in...

Unicorn WB-3300NR routers crossite scripting

Crossite scripting in Web interface...

Unicorn WB-3300NR Cross Site Request Forgery Vulnerability

Unicorn WB-3300NR router version 1 with firmware 5.07.18koUIS02 suffers from multiple cross site request forgery vulnerabilities. Exploit Title: Unicorn Router WB-3300NR CSRF Factory Reset/DNS Change Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: October 29th 2013 Vendor...

Unicorn WB-3300NR Cross Site Request Forgery

Exploit Title: Unicorn Router WB-3300NR CSRF Factory Reset/DNS Change Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: October 29th 2013 Vendor Homepage: http://www.eunicorn.co.kr/kimsboard7/product.php?inc=wb-3300nr Tested on: Unicorn WB-3300NR v1.0 Firmware Version:...

Webmobo WB News System - Blind SQL Injection

Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page: index.php Example:...

Webmobo WB News System - Blind SQL Injection

Webmobo WB News System - Blind SQL Injection Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable...

Webmobo WB News System Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input...

MidiCMS-WB 2011 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

MidiCMS-WB (2011) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2009-4927

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

Authentication flaw

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

CVE-2009-4927

CVE-2009-4927 affects WB News 2.1.2. An authentication bypass is possible by modifying the WBNEWS cookie (set to 1), allowing remote attackers to gain administrative access. The NVD entry and related records confirm a network-exposed vulnerability with a base CVSS v2 score of 7.5 (HIGH) and impac...

CVE-2009-4927

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and possibly 2 message parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-1712

Multiple cross-site scripting XSS vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and possibly 2 message parameters. NOTE: some of these details are obtained from third party information...

CVE-2010-1712

The CVE-2010-1712 entry documents Cross-Site Scripting (XSS) in Webmobo WB News 2.3.3, specifically in base/Comments.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the name parameter and possibly the message parameter, enabling script execution in the vi...