15173 matches found
Integria IMS 5.0.83 - 'search_string' Cross-Site Scripting
Exploit Title: Integria IMS 5.0.83 - Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-12-18 Google Dork: N/A Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected Version: 5.0.83 and possibly before Patched Version: 5.0.84...
Integria IMS 5.0.83 - Cross-Site Request Forgery
Integria IMS 5.0.83 - Cross-Site Request Forgery Exploit Title: Integria IMS 5.0.83 - Cross-Site Request Forgery Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-12-19 Google Dork: N/A Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected Versio...
Integria IMS 5.0.83 - search_string Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Integria IMS 5.0.83 - Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected Version: 5.0.83 and possibly before Patch...
Integria IMS 5.0.83 Cross Site Scripting
Exploit Title: Integria IMS 5.0.83 - Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-12-18 Google Dork: N/A Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected Version: 5.0.83 and possibly before Patched Version: 5.0.84...
Integria IMS 5.0.83 - search_string Cross-Site Scripting
Integria IMS 5.0.83 - searchstring Cross-Site Scripting Exploit Title: Integria IMS 5.0.83 - Cross-Site Scripting Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-12-18 Google Dork: N/A Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected...
Integria IMS 5.0.83 Cross Site Request Forgery
Exploit Title: Integria IMS 5.0.83 - Cross-Site Request Forgery Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-12-19 Google Dork: N/A Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected Version: 5.0.83 and possibly before Patched Version:...
Icinga Web 2 Denial of Service Vulnerability
Icinga Web 2 is a PHP-based responsive and extensible web application framework from the Icinga project. A security vulnerability exists in Icinga Web 2 version 2.6.1. An attacker can exploit this vulnerability to cause a denial of service...
Integria IMS 5.0.83 - Cross-Site Request Forgery
Exploit Title: Integria IMS 5.0.83 - Cross-Site Request Forgery Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-12-19 Google Dork: N/A Vendor: Artica ST Software Link: https://github.com/articaST/integriaims Affected Version: 5.0.83 and possibly before Patched Version:...
Akamai Received Top Scores in Gartner's New Report "Critical Capabilities for Cloud Web Application Firewalls Services"
Are you in the process of selecting a web application firewall WAF or thinking about whether your current solution is adequate? For many organizations selecting the right WAF to protect their business is not an easy task. The threat landscape is changing fast and hackers are very creative in thei...
App Security and PCI; Are you ready for the audit?
As most people know, merchants, financial institutions and anybody else who is involved in processing credit cards are subject to the PCI DSS compliance to reduce fraud and cybersecurity risks. This affects both brick-n-mortar stores and banks as well as card-not-present CNP transactions that...
WordPress Dev-Custom-Management VerzDesign 1.0 Database Disclosure / Shell Upload
Exploit Title : WordPress Dev-Custom-Management Plugins VerzDesign 1.0 Database Backup Disclosure and Arbitrary File Upload Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : wordpress.org verzdesign.com Software Download Link : N/A Teste...
rcp.laska.com.pl Improper Access Control vulnerability
Open Bug Bounty ID: OBB-711577 Description| Value ---|--- Affected Website:| rcp.laska.com.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...
Facebook And Google Reviews System For Businesses 1.1 SQL Injection
Exploit Title: Facebook And Google Reviews System For Businesses 1.1 - SQL Injection Dork: N/A Date: 2018-12-14 Exploit Author: Ihsan Sencan Vendor Homepage: https://codecanyon.net/item/facebook-and-google-reviews-system-for-businesses/22793559 Version: 1.1 Category: Webapps Tested on:...
Tourism Website Blog - Remote Code Execution / SQL Injection Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Tourism Website Blog - Remote Code Execution / SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/12819/tourism-website-blog-faces-negros-web-application.html Software Link:...
Huawei B315s-22 - Information Leak Vulnerability
Exploit for hardware platform in category web applications Product Family: LTE Model B315s – 22 Firmware version: 21.318.01.00.26 Author: Usman Saeed usman at xc0re.net 1. Unauthenticated access to sensitive files: It was observed that the web application running on the router, allows...
.NET Framework Denial Of Service Vulnerability
A denial of service vulnerability exists when .NET Framework improperly handles special web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an .NET Framework web application. The vulnerability can be exploited remotely, without...
[SECURITY] Fedora 28 Update: python-notebook-5.5.0-6.fc28
The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...
Tourism Website Blog - Remote Code Execution / SQL Injection
Exploit Title: Tourism Website Blog - Remote Code Execution / SQL Injection Dork: N/A Date: 2018-12-06 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/12819/tourism-website-blog-faces-negros-web-application.html Software Link:...
CVE-2018-19991
VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...
