PHP Scripts Mall Olx Clone Cross-Site Scripting Vulnerability

PHP Scripts Mall Olx Clone is a responsive advertising website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Olx Clone version 3.4.2, which can be exploited by remote attackers to inject arbitrary web script or HTML...

PYSEC-2018-54

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL...

DamiCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-19082)

DamiCMS is a content management system CMS for building websites quickly. A cross-site request forgery vulnerability exists in the admin.php?s=/Admin/doedit URL in DamiCMS version 6.0.0, which can be exploited by a remote attacker to change the password of an administrator account...

waimai Super Cms Cross-Site Request Forgery Vulnerability (CNVD-2018-19089)

waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site request forgery vulnerability exists in waimai Super Cms 20150505, which can be exploited by a remote attacker to change the configuration with the help of th...

CVE-2018-16366

An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF...

Joomla! cross-site scripting vulnerability (CNVD-2018-17502)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions prior to 3.8.12 that stems from the program failing to adequately filter output. A...

Infoblox NetMRI Cross-Site Scripting Vulnerability

Infoblox NetMRI is a suite of network automation products from Infoblox, Inc. that provides automated network discovery, switch port management, network change automation, and continuous configuration compliance management for routers, switches, and other network devices. A cross-site scripting...

Explainer Series: What is Clickjacking?

Here we go, another online trap ready to ensnare unsuspecting – well, until now anyway – users. As if Phishing, Cryptojacking, credential stuffing and old school scamming wasn’t enough, folks really just can’t catch a break these days. Anyway, we’re here to chat about clickjacking, for those of y...

ZOHO ManageEngine ADManager Plus HTML Injection Vulnerability

ZOHO ManageEngine ADManager Plus is an IT operations management software. ZOHO ManageEngine ADManager Plus suffers from an HTML injection vulnerability that can be exploited by attackers to allow HTML injection...

WordPress Plugin Chained Quiz SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin Chained Quiz, which can be exploited by attackers to execute...

Acunetix WVS 10.0 Build 20150623 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title : Acunetix Web Vulnerability Scanner 10.0 Build 20150623 - Denial of Service PoC Discovery by: Javier Enrique Rodriguez Gutierrez Vendor Homepage: https://www.acunetix.com Tested Version : 10.0 Vulnerability Type : Denial of Service...

Acunetix WVS 10.0 Build 20150623 - Denial of Service (PoC)

Acunetix WVS 10.0 Build 20150623 - Denial of Service PoC Exploit Title : Acunetix Web Vulnerability Scanner 10.0 Build 20150623 - Denial of Service PoC Discovery by: Javier Enrique Rodriguez Gutierrez Discovery Date : 2018-08-11 Vendor Homepage: https://www.acunetix.com Tested Version : 10.0...

Acunetix WVS 10.0 Build 20150623 Denial Of Service

Exploit Title : Acunetix Web Vulnerability Scanner 10.0 Build 20150623 - Denial of Service PoC Discovery by: Javier Enrique Rodriguez Gutierrez Discovery Date : 2018-08-11 Vendor Homepage: https://www.acunetix.com Tested Version : 10.0 Vulnerability Type : Denial of Service PoC Tested on OS :...

Acunetix WVS 10.0 Build 20150623 - Denial of Service (PoC)

Exploit Title : Acunetix Web Vulnerability Scanner 10.0 Build 20150623 - Denial of Service PoC Discovery by: Javier Enrique Rodriguez Gutierrez Discovery Date : 2018-08-11 Vendor Homepage: https://www.acunetix.com Tested Version : 10.0 Vulnerability Type : Denial of Service PoC Tested on OS :...

SQL Injection Vulnerability in DedeCMS

DedeCMS is a web content management system based on PHP+MySQL technology that supports multiple server platforms. A SQL injection vulnerability exists in DedeCMS v5.7 SP2, which can be exploited by attackers to obtain sensitive database information...

Brave Software: Local files reading from the web using `brave://`

Summary: brave:// protocol was introduced as a replacement for AsarProtocolHandleror something like that in brave/muon after 375329. However, fix for 375329 introduced a new much severe bug that allows reading files from a user's device from the web. PoC is similar to 375329, but it uses brave://...

ZZZCMS station-building system background there are arbitrary file deletion vulnerability

zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZZCMS station building system background there are arbitrary file deletion vulnerability, attackers can use the deletion of arbitrary files...

CVE-2018-2989

Vulnerability in the Oracle iLearning component of Oracle iLearning subcomponent: Learner Administration. The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful attacks...

CVE-2018-2980

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

Replay Attacks

vertx-web is vulnerable to replay attacks. The application does not validate CSRF Tokens with the returned CSRF header/form parameter, allowing a malicious user to conduct a replay attack with previously issued tokens...