4056 matches found
PT-2015-5924
Name of the Vulnerable Software and Affected Versions Citrix NetScaler versions prior to 10.5 build 52.3nc Description The issue allows remote attackers to conduct cross-site scripting XSS attacks. This is achieved by exploiting the Nitro API, which returns an error message with an incorrect...
phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection Vulnerability
phpSFP Schedule Facebook Posts version 1.5.6 suffers from a remote SQL injection vulnerability. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection 0-day Website :...
VulnCheck KEV: CVE-2014-4019
ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...
[SECURITY] Fedora 20 Update: dokuwiki-0-0.24.20140929c.fc20
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...
PT-2015-1001
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.2 Description The issue allows a remote attacker to cause a denial of service by sending specially crafted Class 0 SMS messages, resulting in a NULL pointer dereference and device restart. Recommendations For...
CVE-2015-1063: Undefined Security Weakness
CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a Class 0 SMS message...
PuTTY < 0.64 Multiple Information Disclosure Vulnerabilities
The remote host has a version of PuTTY installed that is prior to 0.64. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to a failure to clear SSH-2 private key information from the memory during the saving or loading of key files to...
PHPMoAdmin - Unauthorized Remote Code Execution
PHPMoAdmin - Unauthorized Remote Code Execution | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| PHPMoAdmin Unauthorized Remote Code Execution 0-Day Website : http://www.phpmoadmin.com/ Exploit Author : @u0x Pichaya Morimoto, Xelenonz, pe3z,...
PXE Boot Exploit Server
This module provides a PXE server, running a DHCP and TFTP server. The default configuration loads a linux kernel and initrd into memory that reads the hard drive; placing a payload to install metsvc, disable the firewall, and add a new user metasploit on any Windows partition seen, and add a uid...
Debian: Security Advisory (DSA-3155-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-0223
Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling...
CVE-2015-0223
Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling...
CVE-2015-0223
The vulnerability CVE-2015-0223 affects Apache Qpid 0.30 and earlier, where remote attackers could bypass qpidd access restrictions due to issues in 0-10 connection handling. Impact is unauthorized access risk without explicit exploit details provided; affected components are the qpidd broker in ...
CVE-2015-0223: Undefined Security Weakness
Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling...
PT-2015-4530
Name of the Vulnerable Software and Affected Versions Apache Qpid versions 0.30 and earlier Description The issue allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling. Recommendations For Apache Qpid versions 0.30 and earlier, at...
ManageEngine Desktop Central - Create Administrator
Administrator account creation in ManageEngine Desktop Central / Desktop Central MSP Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 31/12/2014 / Last updated: 05/01/2015...
RedStar 3.0 Desktop - Privilege Escalation (Software Manager - swmng.app) Vulnerability
Exploit for linux platform in category local exploits The root user is disabled on Red Star, and it doesn't look like there is a way to enable it. UnFortunately, they left a big security hole: the Software Manager swmng.app, which runs as root through sudo and will install any RPM package, even i...
RedStar 3.0 Desktop - 'Software Manager swmng.app' Local Privilege Escalation
The root user is disabled on Red Star, and it doesn't look like there is a way to enable it. UnFortunately, they left a big security hole: the Software Manager swmng.app, which runs as root through sudo and will install any RPM package, even if unsigned. To get root, get this RPM package I made...
[SECURITY] [DLA 130-1] firebird2.1 security update
Package : firebird2.1 Version : 2.1.3.18185-0.ds1-11+squeeze2 CVE ID : CVE-2014-9323 Segfault in server caused by malformed network packet. See: http://tracker.firebirdsql.org/browse/CORE-4630...