CVE-2013-1059

net/ceph/authnone.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an authreply message that triggers an attempted buildrequest operation...

PT-2013-2847 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.10 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and system crash, or possibly have other unspecified impacts. This is achieved via an auth...

UBUNTU-CVE-2013-1059

net/ceph/authnone.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an authreply message that triggers an attempted buildrequest operation...

Paypal Bug Bounty #102 QRL - Auth Bypass Vulnerability

Document Title: =============== Paypal Bug Bounty 102 QRL - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=995 PayPal Security UID: ZVf25kC Release Date: ============= 2013-07-04 Vulnerability Laboratory ID VL-ID:...

Paypal Bug Bounty #102 QRL - Auth Bypass Vulnerability

Document Title: =============== Paypal Bug Bounty 102 QRL - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=995 PayPal Security UID: ZVf25kC Release Date: ============= 2013-07-04 Vulnerability Laboratory ID VL-ID:...

KLA10102 OSI vulnerability in Cerberus FTP Server

An unspecified vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can obtain information about user accounts. This vulnerability can be exploited from the network at a point related to SSH auth via login result analysis. Original advisories Cerber...

SAP SOAP RFC RZL_READ_DIR_LOCAL Directory Contents Listing

This module exploits the SAP NetWeaver RZLREADDIRLOCAL function, on the SAP SOAP RFC Service, to enumerate directory contents. It returns only the first 32 characters of the filename since they are truncated. The module can also be used to capture SMB hashes by using a fake SMB share as DIR. This...

PayPal BillSafe Authentication Bypass

Title: ====== PayPal Bug Bounty 45 BillSafe - Remote Auth Bypass Session Web Vulnerability Date: ===== 2013-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=804 http://www.vulnerability-lab.com/dev/?p=665 PayPal Security UID: og1eb1mgi PayPal Inc Bug Bounty: 5000$...

PayPal BBP #45 BillSafe - Auth Bypass Vulnerability

Document Title: =============== PayPal BBP 45 BillSafe - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=804 http://www.vulnerability-lab.com/dev/?p=665 PayPal Security UID: og1eb1mgi PayPal Inc Bug Bounty: 5000$ Release Date:...

PayPal BBP #45 BillSafe - Auth Bypass Vulnerability

Document Title: =============== PayPal BBP 45 BillSafe - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=804 http://www.vulnerability-lab.com/dev/?p=665 PayPal Security UID: og1eb1mgi PayPal Inc Bug Bounty: 5000$ Release Date:...

CVE-2013-1155

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

CVE-2013-1155

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

CVE-2013-1155: Improper Authentication

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

EasyPHP Webserver PHP Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

EasyPHP WebServer v.(all) <= Multiple Vulnerabilities

EasyPHP is Suffer from : + Auth Bypass + Remote Shell Injection / Remote Code Execute The Bug in EasyPHP WebServer Manager found because the PORTAL of Administration doesn't protected ! so just when you found the Admin-Portal - you can bypass the auth directly and remote attacker can get some...

SAP SOAP RFC SXPG_CALL_SYSTEM Remote Command Execution

This module abuses the SAP NetWeaver SXPGCALLSYSTEM function, on the SAP SOAP RFC Service, to execute remote commands. This module needs SAP credentials with privileges to use the /sap/bc/soap/rfc in order to work. The module has been tested successfully on Windows 2008 64-bit and Linux 64-bit...

Free Hosting Manager 2.0.2 - Multiple SQL Injections

Free Hosting Manager 2.0.2 - Multiple SQL Injections ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13...

PT-2013-3828

Name of the Vulnerable Software and Affected Versions Spree versions 1.1.x through 1.1.5 Spree versions 1.2.x Spree versions 1.3.x Description The issue arises from unsafe mass assignment when updating a user, allowing remote authenticated users to assign arbitrary roles to themselves. This is du...

PT-2013-2001

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue is related to the copy to user auth function in net/xfrm/xfrm user.c, which incorrectly uses a C library function for copying a string. This allows local users with the CAP NET ADMIN...

UBUNTU-CVE-2013-0184

Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."...