3954 matches found
Fishing Reservation System 7.5 - (uid) SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Fishing Reservation System 7.5 - 'uid' SQL Injection Vendor: https://fishingreservationsystem.com/index.html Software: https://fishingreservationsystem.com/features.htm CVE: N/A Technical Details & Description:...
HardDrive 2.1 for iOS - Arbitrary File Upload Vulnerability
Exploit for iOS platform in category web applications Title: HardDrive 2.1 for iOS - Arbitrary File Upload Software: https://apps.apple.com/ch/app/harddrive/id383226784 Document Title: =============== HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability Product & Service Introduction:...
POS PHP v17.5 - (Employees) Persistent Web Vulnerability
Document Title: =============== POS PHP v17.5 - Employees Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2230 Release Date: ============= 2020-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 22...
Sales Force Assistant Cross-Site Scripting Vulnerability
NI Consulting Sales Force Assistant is a suite of sales support and information sharing tools from NI Consulting Japan. The product supports features such as customer relationship management, case management, complaint management, and visit program management. A cross-site scripting vulnerability...
HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability
Document Title: =============== HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2221 Release Date: ============= 2020-04-28 Vulnerability Laboratory ID VL-ID: ====================================...
Grafana Cross-Site Scripting Vulnerability (CNVD-2020-32431)
Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A cross-site scripting vulnerability exists in Grafana versions prior to 6.7.3. The...
Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat) (CNVD-2020-29221)
Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Heybbs 1.2 re***.php file has SQL injection vulnerability (CNVD-2020-31449)
HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 re.php file, which can be exploited by attackers to obtain database information...
PrestaShop cross-site scripting vulnerability (CNVD-2020-25944)
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the 'back' parameter in PrestaShop...
python-markdown2 cross-site scripting vulnerability (CNVD-2020-33575)
python-markdown2 is a Python-based implementation of the Markdown text markup format. A cross-site scripting vulnerability exists in python-markdown2 version 2.3.8 and earlier. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
bungeiweb.net Open Redirect vulnerability
Open Bug Bounty ID: OBB-1146296 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting bungeiweb.net website and its users. Following...
SCANNER-INURLBR
It is an offensive tool for web application vulnerability scanning. The primary CVE ID present in the context is not explicitly mentioned, but the tool is designed for Google Hacking and web application vulnerability scanning. The target product/service or framework is not explicitly stated, but...
Missing HTTP Security Headers
keycloak does not contain security headers in its server responses. The lack of these headers does not directly lead to a vulnerability, however it reduces the restrictions of an attacker and aids them in their efforts in the event of a successful exploit of a web vulnerability...
Arbitrary File Deletion Vulnerability in Aptar CMS
Aptar CMS is a website management system with PHP+MYSQL technology. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...
Arbitrary File Read Vulnerability in EDI CMS
ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file read vulnerability that can be exploited by an attacker to read configuration files on the server...
Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-26945)
NETGEAR D7800 and others are products of NETGEAR, Inc.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR XR500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...
SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities
Document Title: =============== SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2209 Release Date: ============= 2020-04-14 Vulnerability Laboratory ID VL-ID: ====================================...
Vastgota-Data ProVide Cross-Site Request Forgery Vulnerability
Vastgota-Data ProVide is a file transfer server with a graphical user interface from Vastgota-Data, Sweden. A cross-site request forgery vulnerability exists in Vastgota-Data ProVide version 13.1 and earlier. The vulnerability stems from a WEB application that does not adequately validate that a...
PT-2020-19673 · None · Class-Transformer
Name of the Vulnerable Software and Affected Versions: class-transformer versions prior to 0.3.1 Description: The issue allows attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a proto payloa...
