310 matches found
Tcpdump NFS parser buffer overflow vulnerability (CNVD-2017-27746)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.NFS parser is one of the network file system parsers. A buffer overflo...
UBUNTU-CVE-2017-13005
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...
PT-2017-12845
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the NFS parser component of tcpdump, specifically in the xid map enter function within print-nfs.c. This could allow a remote attacker to obtain sensitive...
Easy DVD Creator 2.5.11 - Local Buffer Overflow (SEH)
!/usr/bin/python Exploit Title: Easy DVD Creator 2.5.11 - Buffer Overflow Windows 10 64bit, SEH Date: 26-08-2017 Exploit Author: tr0ubl3m4k3r Vulnerable Software: Easy DVD Creator Vendor Homepage: http://www.divxtodvd.net/ Version: 2.5.11 Software Link: http://www.divxtodvd.net/easydvdcreator.exe...
Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)
!/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.exe Tested Version : 1.4.24 Category : Denial of Servic...
Opera Web Browser Denial of Service Vulnerability (CNVD-2016-12650)
Opera Software Web Browser is a Norwegian Web browser developed by Opera Software that supports multi-window browsing, customizable user interface, and more. A denial of service vulnerability exists in Opera version 41.0.2353.69, which can be exploited to cause an empty object to run out of memor...
Cryptsetup Initrd LUKS Root Shell Elevation of Privilege Vulnerability
cryptsetup is a tool that implements the LUKS Linux Unified Key Setup specification, which is the Linux hard disk encryption specification. A local elevation of privilege vulnerability exists in Cryptsetup, which can be exploited to corrupt Linux boxes by pressing the Enter key for 70 seconds to...
phpEnter 4.2.7 Cross Site Request Forgery
function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5"; xhr.setRequestHeader"Content-Type"...
phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)
phpEnter 4.2.7 - Cross-Site Request Forgery Add New Post function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...
phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)
function submitRequest var xhr = new XMLHttpRequest; xhr.open"POST", "http://sitename/path/addnews.php", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"; xhr.setRequestHeader"Accept-Language", "en-US,en;q=0.5"; xhr.setRequestHeader"Content-Type"...
Wordpress Lazy SEO plugin 1.1.9 - Shell Upload Vulnerability
No description provided by source. Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo Software Link :...
UBUNTU-CVE-2014-3202
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...
PT-2014-5142
Name of the Vulnerable Software and Affected Versions Unity versions prior to 7.2.1 Description The issue arises from improper handling of entry activation, allowing physically proximate attackers to bypass the lock screen. This can be achieved by holding the ENTER key, which causes the process t...
CVE-2014-3202: Undefined Security Weakness
Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...
DEBIAN-CVE-2013-7221
The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...
CVE-2013-7221
The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...
CVE-2013-7221: Undefined Security Weakness
The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...
gtk2 security update
CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...
