17 matches found
CVE-2019-16278
CVE-2019-16278 Remote Command Execution Exploit Script for Nostromo Web Server Introduction A remote command execution vulnerability caused by directory traversal. Similar to CVE-2011-0751, the filtering is not strict, allowing bypass using %0d. Affected Versions nostromo = 1.9.6...
EUVD-2013-2611
Malware in sbrugna...
PT-2024-35062
Name of the Vulnerable Software and Affected Versions Ritlabs TinyWeb Server version 1.94 Description A vulnerability was found in the Request Handler component of Ritlabs TinyWeb Server. The manipulation with the input %0D%0A leads to CRLF injection. It is possible to launch the attack remotely...
CVE-2013-2672
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...
Design/Logic Flaw
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...
CVE-2013-2672
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...
CVE-2013-2672: Insufficiently Protected Credentials
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...
CVE-2019-6802: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI...
CoolPlayer+ Portable 2.19.6 Stack Overflow
Exploit Title: CoolPlayer+ Portable build 2.19.6 - .m3u Stack Overflow Egghunter+ASLR bypass Exploit Author: Karn Ganeshen Download link: https://sourceforge.net/projects/portableapps/files/CoolPlayer%2B%20Portable/CoolPlayerPlusPortable2.19.6.paf.exe/download?usemirror=liquidtelecom Version:...
Debian GNU/Linux Data Compromise
The libnspr4-0d-dbg package in the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libnspr4-0d package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libnss3-0d package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libnss3-0d-dbg package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Brother MFC-9970CDW Firmware 0D Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ========================================= Brother MFC-9970CDW Firmware 0D Date: Jan. 13, 2013 URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html ========================================= Keywords...
Ubuntu Update for thunderbird regression USN-927-3
Ubuntu Update for Linux kernel vulnerabilities USN-927-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN9273.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird regression USN-927-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu 9.10 : thunderbird regression (USN-927-3)
USN-927-1 fixed vulnerabilities in NSS. Due to upstream changes in NSS 3.12.6, Thunderbird would be unable to initialize the security component and connect with SSL/TLS if the old libnss3-0d transition package was installed. This update fixes the problem. We apologize for the inconvenience. Marsh...
MS Windows PNG File IHDR Block Denial of Service Exploit PoC (c) (2)
No description provided by source. // Microsoft Windows PNG IHDR block DoS PoC 2 // // CPU load goes to 100% until you restart explorer.exe // // Bug found by: Preddy ? // // Compiled and tested with Windows XP SP2, Visual studio 6, no psdk // // Header: 89 50 4e 47 0d 0a // // Greets: scoper,...