Sam Spade 1.14 SEH Overflow

!/usr/bin/env python Exploit Title : Sam Spade 1.14 S-Lang Command Field SEH Overflow Crash PoC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 12/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested...

Sam Spade 1.14 - S-Lang Command Field SEH Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 S-Lang Command Field SEH Overflow Crash PoC Discovery by : Nipun Jaswal Email : email protected Discovery Date : 12/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - S-Lang Command Field Overflow (SEH)

Sam Spade 1.14 - S-Lang Command Field Overflow SEH !/usr/bin/env python Exploit Title : Sam Spade 1.14 S-Lang Command Field SEH Overflow Crash PoC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 12/11/2015 Vendor Homepage : http://samspade.org Software Link :...

Sam Spade 1.14 - S-Lang Command Field Overflow (SEH)

!/usr/bin/env python Exploit Title : Sam Spade 1.14 S-Lang Command Field SEH Overflow Crash PoC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 12/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested...

PT-2015-6583

Name of the Vulnerable Software and Affected Versions Anima Gallery version 2.6 Description The issue concerns directory traversal vulnerabilities in the func.php file of Anima Gallery. Remote attackers can exploit this by including and executing arbitrary local files. This can be achieved by usi...

WordPress xili-language Plugin <= 2.8.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in index.php lang parameter. Solution Update the plugin...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the glib2-lang package in the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the accessibility of protected information.

The vulnerability of the vino-lang package in the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out remotely...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the PackageKit-lang package of the openSUSE operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed the...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bash-lang package in the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

WordPress WPML plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WPML is one of the multi-language plug-ins. A SQL injection vulnerability exists in versions of the WordPress WPML...

PT-2015-5707

Name of the Vulnerable Software and Affected Versions WPML plugin versions prior to 3.1.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lang parameter in the HTTP Referer header in a "wp-link-ajax" action to "comments/feed"...

CVE-2015-2314: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed...

PT-2015-4284

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.5.8 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the install lang parameter in the install.php file. Recommendations For versions prior to 1.5.8, upda...

lang-8.com XSS vulnerability

Open Bug Bounty ID: OBB-53766 Description| Value ---|--- Affected Website:| lang-8.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

osTicket Cross-Site Scripting Vulnerability

osTicket is a WEB-based ticket e-commerce system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.9.5.1, which allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2015-1347

Cross-site scripting XSS vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2015-1347: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2015-5226

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.9.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the client.inc.php file. Recommendations For versions prior to 1.9.5.1,...