SIEMENS IP-Camera CVMS2025-IR, CCMS2025 - Credentials Disclosure

No description provided by source...

Mastery OA /interface/go.php SQL injection vulnerability

No description provided by source...

SAM Softech SQL injection vulnerability

No description provided by source...

Easy FTP Server 1.7.0.11 APPE remote code execution vulnerability

No description provided by source. !/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team Easy FTP server remote exploit DATE 03/03/2012 DESCRIPTION Easy FTP Server - "APPE" command buffer overflow - remote exploit...

Suzara Web Design cat_podrobno.php parameter id SQL injection vulnerability

No description provided by source...

Pan micro-OA system /web/broswer/SectorInfoBrowser. the jsp blind

No description provided by source...

Ocean DevGroup detalle-proyecto.php parameter id SQL injection vulnerability

No description provided by source...

stash v1. 0. 3-background SQL injection

No description provided by source...

HandMade Connection CMS index.php parameter file arbitrary File Download vulnerability

No description provided by source...

Pan micro E-office /inc/group_user_list/group_xml.php SQL injection vulnerability

No description provided by source...

weaver e-office /UserSelect/main.php information disclosure vulnerability

No description provided by source...

Theindia index.php the Parameters page of the SQL blind injection vulnerability

No description provided by source...

The micro-engine technology payment/wechat/nofity.php SQL injection vulnerability

No description provided by source...

74cms 3.7（20160604） sql injection vulnerability

No description provided by source...

tcpdump 4.5.1 denial of service vulnerability

No description provided by source. Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from...

Joomla AceFTP component parameters item an arbitrary File Download vulnerability

No description provided by source...

FortiGate firmware Cookie Parser Buffer Overflow Vulnerability

No description provided by source...

Joomla com aceftp Arbitrary File Download Vulnerability

No description provided by source...

Cisco ASA SNMP Remote code execution vulnerability

No description provided by source...

Zabbix 2.2. x, 3.0. x latest.php SQL injection vulnerability

Zabbix insertDBinjection vulnerabilities analysis Vulnerability linkage: https://www.seebug.org/vuldb/ssvid-92302 A vulnerability overview 1. Vulnerability description Zabbix is a WEB-based interface to provide distributed system monitoring and network monitoring capabilities of enterprise-class...

MacCMS v8 admin_interface.php SQL injection

No description provided by source...

PROWEB CMS Sql Injection Vulnerability

No description provided by source...

Joomla com_registrationpro parameter year SQL Injection Vulnerability

No description provided by source...

Pan micro E-office /general/new_mytable/content_list/content_-99.php parameters block_id injection vulnerability

No description provided by source...

IE11 remote code execution vulnerability MS16-063）

No description provided by source. oElement = document.createElement"IMG"; var oAttr = document.createAttribute"loop"; oAttr.nodeValue = oElement; oElement.loop = 0x41424344; oElement.setAttributeNodeoAttr; oElement.removeAttributeNodeoAttr; CollectGarbage;...

The micro-engine technology-the QR code to delete the page platform/qr.ctrl.php Sql injection

No description provided by source...

ZABBIX v2. 2. x, 3.0.0-3.0.3 jsrpc parameters profileIdx2 insert injection vulnerability

漏洞分析 此漏洞出现在jsrpc.php中，180行 case 'screen.get': $options = 'pageFile' = !empty$data'pageFile' ? $data'pageFile' : null, 'mode' = !empty$data'mode' ? $data'mode' : null, 'timestamp' = !empty$data'timestamp' ? $data'timestamp' : time, 'resourcetype' = !empty$data'resourcetype' ? $data'resourcetype' :...

Navis WebAccess /express/showNotice. do parameters GKEY Oracle injection vulnerability

No description provided by source...

Websoft ourpeople.php parameter id SQL injection vulnerability

No description provided by source...

wordpress force force-download.php parameter file arbitrary File Download vulnerability

No description provided by source...

1caitong /PriceDetail/PriceComposition_Formula. aspx the parameter elementId injection vulnerability

No description provided by source...

Nagios(2.2.1) network monitoring multiple CSRF

No description provided by source. document.forms0.submit input type="radio" name="group" value="1" checked="t...

Microsoft Edge remote code execution (MS16-096)

No description provided by source...

EyeLock nano NXT 3.3-3.5 unauthenticated command injection vulnerabilities

/scripts/rpc.php: --- 9: if isset$REQUEST'action' 10: 11: switch$REQUEST'action' ... ... 181: case 'updatetime': 182: 183: // do something, the put our response in the response field... 184: $strDate = shellexec"rdate -s $REQUEST'timeserver' 2&1"; 185: 186: // set the hardware clock. 187:...

Microsoft Office Word 2007/2010/2013/2016 - Out-of-Bounds Read Remote Code Execution (MS16-099)

No description provided by source...

quickerbb -0.7.0注册页面存在xss漏洞

No description provided by source...

KJ65N coal mine remote monitoring and security early warning systems /configs. aspx from unauthorized access vulnerability

No description provided by source...

phpcollab-emailuser-SQL injection vulnerability

No description provided by source...

wordpress-"Add From Server"plugin CSRF

No description provided by source. Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin Abstract It was discovered that Add From Server is vulnerabile to Cross-Site Request Forgery. It can be exploited by luring the target user into clicking a specially crafted link or...

ntop/nbox 2.3 <= 2.5 - Multiple Vulnerabilities

No description provided by source. E-DB Note: Source http://carnal0wnage.attackresearch.com/2016/08/got-any-rces.html The issues were found originally in nbox 2.3 and confirmed in nbox 2.5 To make things easier, I created a Vagrantfile with provisioning so you can have your own nbox appliance and...

Ruvar OA system WorkPlanAttachDownLoad. aspx parameters sys_file_storage_id SQL injection vulnerability

No description provided by source...

Android sensord root 提权漏洞

No description provided by source...

joomla component com_ewriting parameters cat SQL injection vulnerability

No description provided by source...

SG8000 large rotating machine monitoring system/app/sg8k_rs/config/sg8k_config. xml information disclosure

No description provided by source...

Dahan jcms /jcms/jcms_files/jcms1/web1/site/module/comment/opr_ballot. jsp parameters c_uuid time blind

No description provided by source...

TikiWiki 15.0 flv_stream.php Arbitrary File Download

No description provided by source...

Wordpress force download Arbitrary File Download

No description provided by source...

TikiWiki 15.1 ELFinder Unauthenticated File Upload

Description A file upload vulnerability in Tiki Wiki --Part83012510490351498898101-- 3. Info Author: Mehmet Ince https://www.exploit-db.com/exploits/40091/...

Mediaone category.php parameter id SQL injection vulnerability

No description provided by source...

Tyco Cms download.php parameter file arbitrary File Download vulnerability

No description provided by source...