coresecurity.com vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop prior to 6.155 allow remote malicious users to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address.

Cactushop Cactushop Cactushop Cactushop 3 Cactushop Cactushop 4 Cactushop Cactushop 4.1 Cactushop Cactushop 4.5 Cactushop Cactushop 4.6 Cactushop Cactushop 4.7 Cactushop Cactushop 5.0 Cactushop Cactushop 5.1

1 EDB exploit

Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x prior to 3.2.6.1, 4.0.x prior to 4.0.3.1, 4.1.x prior to 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows r...

Springsource Application Management Suite 2.0.0 Springsource Hyperic Hq 3.2 Springsource Hyperic Hq 3.2.0 Springsource Hyperic Hq 3.2.1 Springsource Hyperic Hq 3.2.2 Springsource Hyperic Hq 3.2.3 Springsource Hyperic Hq 3.2.4 Springsource Hyperic Hq 3.2.5 Springsource Hyperic Hq 3.2.6 Springsource Hyperic Hq 4.0.0 Springsource Hyperic Hq 4.0.1 Springsource Hyperic Hq 4.0.2

1 EDB exploit

SQL injection vulnerability in includes/content/cart.inc.php in CubeCart PHP Shopping cart 4.3.4 up to and including 4.3.9 allows remote malicious users to execute arbitrary SQL commands via the shipKey parameter to index.php.

Cubecart Cubecart 4.3.4 Cubecart Cubecart 4.3.5 Cubecart Cubecart 4.3.6 Cubecart Cubecart 4.3.7 Cubecart Cubecart 4.3.8 Cubecart Cubecart 4.3.9

1 EDB exploit

The Wifi hotspot in Lenovo SHAREit prior to 3.2.0 for Windows allows remote malicious users to obtain sensitive file names via a crafted file request to /list.

1 Article

The Wifi hotspot in Lenovo SHAREit prior to 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote malicious users to obtain access by leveraging a position within the WLAN coverage area.

1 Article

The Wifi hotspot in Lenovo SHAREit prior to 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote malicious users to obtain access by leveraging a position within the WLAN coverage area.

Lenovo Shareit 3.0.18 Ww

1 Article

Directory traversal vulnerability in MayGion IP Cameras with firmware prior to 2013.04.22 (05.53) allows remote malicious users to read arbitrary files via a .. (dot dot) in the default URI.

Maygion Ip Camera Firmware Maygion Ip Camera Firmware 05.49 Maygion Ip Camera Firmware 05.53 Maygion Ip Camera Firmware 05.59 Maygion Ip Camera Firmware 05.60 Maygion Ip Camera Firmware 6.0 Maygion Ip Camera Firmware 6.1 Maygion Ip Camera Firmware 6.2

1 EDB exploit

Buffer overflow in MayGion IP Cameras with firmware prior to 2013.04.22 (05.53) allows remote malicious users to execute arbitrary code via a long filename in a GET request.

Maygion Ip Camera Firmware Maygion Ip Camera Firmware 05.49 Maygion Ip Camera Firmware 05.53 Maygion Ip Camera Firmware 05.59 Maygion Ip Camera Firmware 05.60 Maygion Ip Camera Firmware 6.0 Maygion Ip Camera Firmware 6.1 Maygion Ip Camera Firmware 6.2

1 EDB exploit

Core Security Technologies Advisory - A security vulnerability was discovered in PineApp Mail-SeCure Suite, allowing a non-privileged attacker to get a root shell by sending a specially crafted command from the Mail-SeCure console. A valid user account is needed to launch the att...

Core Security Technologies Advisory - The Ubiquiti airCam RTSP service 'ubnt-streamer' has a buffer overflow when parsing the URI of a RTSP request message. This bug allows remote attackers to execute arbitrary code via RTSP request message.

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook