vulnerability-lab.com vulnerabilities and exploits

(subscribe to this query)

Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter.

Morfy Cms Project Morfy Cms

Multiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) user or (2) password param...

Bird Feeder Project Bird Feeder 1.2.3

Directory traversal vulnerability in ES File Explorer 3.2.4.1.

Estrongs Es File Explorer 3.2.4.1

Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 up to and including 5.0.10 and 5.2.0 up to and including 5.2.1 and FortiManager 5.0.3 up to and including 5.0.10 and 5.2.0 up to and including 5.2.1 allows remote malicio...

Fortinet Fortimanager Firmware 5.0.4 Fortinet Fortimanager Firmware 5.0.5 Fortinet Fortimanager Firmware 5.2.1 Fortinet Fortimanager Firmware 5.0.8 Fortinet Fortimanager Firmware 5.0.9 Fortinet Fortimanager Firmware 5.0.6 Fortinet Fortimanager Firmware 5.0.7 Fortinet Fortimanager Firmware 5.0.3 Fortinet Fortimanager Firmware 5.0.10 Fortinet Fortimanager Firmware 5.2.0 Fortinet Fortianalyzer Firmware 5.0.10 Fortinet Fortianalyzer Firmware 5.2.0 Fortinet Fortianalyzer Firmware 5.0.0 Fortinet Fortianalyzer Firmware 5.0.1 Fortinet Fortianalyzer Firmware 5.2.1

The Adobe Premiere Clip app prior to 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vectors.

Adobe Premiere Clip

An issue exists in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:[file1]?pa...

Tortoisesvn Tortoisesvn 1.12.1

1 EDB exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in the iTwitter plugin 0.04 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) itex_t_t...

Itwitter Project Itwitter

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, ...

Telestar Bobs Rock Radio Firmware -Telestar Dabman D10 Firmware -Telestar Dabman I30 Stereo Firmware -Telestar Imperial I110 Firmware -Telestar Imperial I150 Firmware -Telestar Imperial I200 Firmware -Telestar Imperial I200-cd Firmware -Telestar Imperial I400 Firmware -Telestar Imperial I450 Firmware -Telestar Imperial I500-bt Firmware -Telestar Imperial I600 Firmware -Auna Connect 100 Firmware -

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have insufficient access control for the /set_dname, /mylogo, /Loc...

Telestar Bobs Rock Radio Firmware -Telestar Dabman D10 Firmware -Telestar Dabman I30 Stereo Firmware -Telestar Imperial I110 Firmware -Telestar Imperial I150 Firmware -Telestar Imperial I200 Firmware -Telestar Imperial I200-cd Firmware -Telestar Imperial I400 Firmware -Telestar Imperial I450 Firmware -Telestar Imperial I500-bt Firmware -Telestar Imperial I600 Firmware -

Kentico 9.0 up to and including 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, read...

Kentico Kentico Cms

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook