PT-2014-9008

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 through 3.1 Description The issue allows remote attackers to hijack the authentication of administrators for requests that change the admin or dial password via a request to "httpd/cgi-bin/changepw.cgi"...

CVE-2011-5284: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...

SmoothWall 3.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: SmoothWall 3.1 Multiple vulnerabilities Date: 21/12/2014 Author: Yann CAM @ Synetis Vendor or Software Link: www.smoothwall.org - www.smoothwall.org/download/ Version: 3.1 Category: CSRF password reset & XSS persistent Google dork: Tested on: Smoothwall Linux distribution Smoothwal...

PT-2014-8889

Name of the Vulnerable Software and Affected Versions D-link IP camera DCS-2103 version 1.0.0 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter of the cgi-bin/sddownload.cgi endpoint. Recommendations For D-link IP camera DCS-2103 version...

PT-2014-8893

Name of the Vulnerable Software and Affected Versions D-link IP camera DCS-2103 version 1.0.0 Description The issue allows remote attackers to obtain the installation path. This can be achieved by exploiting the "file" parameter to the "cgi-bin/sddownload.cgi" API endpoint, for example, by using ...

CVE-2014-9238: Improper Limitation of a Pathname to a Restricted Directory

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / forward slash character...

CVE-2014-9234: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Ubuntu 12.04 LTS : kde-workspace vulnerabilities (USN-2402-1)

David Edmundson discovered that the KDE Clock KCM policykit helper did not properly guard against untrusted input. Under certain circumstances, a process running under the user's session could exploit this to run programs as the administrator. Note that Tenable Network Security has extracted the...

Position independent & Alphanumeric 64-bit execve("/bin/sh\0",NULL,NULL); - 87 Byte

87 bytes small position independent and alphanumeric 64-bit execve"/bin/sh\0",NULL,NULL; shellcode. Title: Position independent & Alphanumeric 64-bit execve"/bin/sh\0",NULL,NULL; 87 bytes Author: Breaking.Technology Date: 06 November 2014 Vendor Homepage: http://breaking.technology Version: x86-6...

CVE-2012-5580: Improper Control of Generation of Code

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

PT-2014-4472

Name of the Vulnerable Software and Affected Versions Innovative vtls-Virtua versions prior to 2013.2.4 Innovative vtls-Virtua versions 2014.x prior to 2014.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username or password parameter...

CVE-2014-2081: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the login in webreports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...

Code injection

lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte %00 in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code...

PT-2014-7849

Name of the Vulnerable Software and Affected Versions TWiki versions 6.0.0 and earlier Description The issue allows remote attackers to bypass intended access restrictions and upload files with restricted names by using a null byte %00 in a filename to bin/upload.cgi. This can be exploited to...

CVE-2014-7237: Undefined Security Weakness

lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte %00 in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

PT-2014-6177

Name of the Vulnerable Software and Affected Versions Cryoserver Security Appliance version 7.3.x Description The issue concerns weak permissions for the /etc/init.d/cryoserver file, allowing local users to escalate privileges. This can be achieved by accessing the support account and executing t...

CVE-2014-4867: Undefined Security Weakness

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

CVE-2013-3083: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/systemsetting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remotemgmtenabled and remotemgmtport parameter...

Qmail SMTP Bash Environment Variable Injection (Shellshock)

This module exploits a shellshock vulnerability on Qmail, a public domain MTA written in C that runs on Unix systems. Due to the lack of validation on the MAIL FROM field, it is possible to execute shell code on a system with a vulnerable BASH Shellshock. This flaw works on the latest Qmail...