code injection in `Wrapper::buildClientWrapperCode` via manipulation of the `$client` argument

security fix: hardened the Client::send method against misuse of the $method argument issue 81. Abusing its value, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakne...

PT-2012-6001

Name of the Vulnerable Software and Affected Versions OpenVAS Manager versions prior to 3.0.4 Description The issue allows remote attackers to execute arbitrary commands via specific fields in an OMP request. This is due to a problem in the send to sourcefire function in manage sql.c...

CVE-2012-3887: Undefined Security Weakness

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the...

PT-2012-5061

Name of the Vulnerable Software and Affected Versions AirDroid versions prior to 1.0.7 beta Description The issue allows remote attackers to obtain sensitive information by sniffing the local wireless network. This is due to the use of a cleartext base64 format for data transfer, which is...

PT-2012-2943 · Tiki · Tikiwiki Cms/Groupware

Name of the Vulnerable Software and Affected Versions: TikiWiki CMS/Groupware versions prior to 6.7 LTS and prior to 8.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a crafted serialized object. This can be achieved through several parameters, including...

IBM AIX TCP Large Send Denial of Service Vulnerability

Binary data aixicmpechoreplydos.nbin...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

WordPress Plugin Google Maps via Store Locator 2.7.1 < 3.0.1 - Multiple Vulnerabilities

Description : Wordpress Plugins - Google Maps via Store Locator Plus Multiple Vulnerability Version : 2.7.1 - 3.0.1 Link : http://wordpress.org/extend/plugins/store-locator-le/ Plugins : http://downloads.wordpress.org/plugin/store-locator-le.3.0.1.zip Date : 26-05-2012 Google Dork :...

kernel: net: insufficient data_len validation in sock_alloc_send_pskb()

The sockallocsendpskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service heap-based buffer overflow and system crash or possibly gain privileges by leveraging access to a TUN/TAP...

IPhone TreasonSMS & WifiSMS - Multiple Web Vulnerabilities

Document Title: =============== IPhone TreasonSMS & WifiSMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=154 Release Date: ============= 2012-04-22 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2016-1173

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.23 Description The issue is related to multiple stack-based buffer overflows in the send dg and send vc functions of the libresolv library in glibc. This can be exploited by a remote attacker to cause a denial of...

Design/Logic Flaw

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service assertion failure and panic via an unspecified series of packets...

IBM AIX TCP栈拒绝服务漏洞

Bugtraq ID: 51864 CVE ID：CVE-2012-0194 IBM AIX是一款商业性质的操作系统 当在IBM AIX网络接口上启用TCP "Large Send Offload"选项时才能在一个错误，AIX允许远程攻击者对系统进行拒绝服务攻击。通过发送特殊构建的报文序列，攻击者可以利用此漏洞触发内核崩溃 0 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息...

CVE-2012-0194: Undefined Security Weakness

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service assertion failure and panic via an unspecified series of packets...

PT-2012-2392

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3 through 7.1 Description The issue is related to the TCP implementation when the Large Send Offload option is enabled, allowing remote attackers to cause a denial of service. This can be achieved by sending a...

PHPList 2.10.9 Cross Site Request Forgery / Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : phplist - version 2.10.9 CSRF/XSS Vulnerability version : 2.10.9 Author : Cyber-Crystal Date : n/a Dork : inurl:"powered by phplist - version 2.10.9" Software Link : http://www.phplist.com/...

phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : phplist - version 2.10.9 CSRF/XSS Vulnerability version : 2.10.9 Author : Cyber-Crystal Date : n/a Dork : inurl:"powered by phplist - version 2.10.9" Software Link : http://www.phplist.com/...

PT-2012-1907

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions 4.0 through 5.1+SP1+Upd1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash. This can be achieved via crafted...

PT-2011-4995

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in a gv send action to "index.php". Recommendations For versions pri...

Spreecommerce 0.60.1 Arbitrary Command Execution

Exploit for linux platform in category web applications $Id: spreesearchexec.rb 13831 2011-10-07 17:45:15Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...