74 matches found
WinMTR 0.91 - Denial of Service Exploit
Exploit for windows platform in category dos / poc Exploit Title: WinMTR 0.91 - Denial of Service PoC Exploit Author: Ihsan Sencan Vendor Homepage: http://winmtr.net Software Link: http://winmtr.net/winmtrdownload/ Version: 0.91 Category: Dos Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1 Host:...
WinMTR 0.91 Denial Of Service
Exploit Title: WinMTR 0.91 - Denial of Service PoC Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: http://winmtr.net Software Link: http://winmtr.net/winmtrdownload/ Version: 0.91 Category: Dos Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1 Host: Payload !/usr/bin/python...
CVE-2018-11574
Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files...
tcmu-runner Information Disclosure Vulnerability
tcmu-runner is a daemon for handling the userspace side of the LIO TCM-User backstore. An information disclosure vulnerability exists in handlerqcow.so in tcmu-runner versions 0.91-1.2.0. An attacker can exploit this vulnerability to inspect any file with root privileges...
PT-2021-7703 · Inkscape +2 · Inkscape +2
Name of the Vulnerable Software and Affected Versions: Inkscape versions 0.19 through 0.91 Description: The issue is related to an out-of-bounds write, which may allow an attacker to execute arbitrary code. This could potentially enable a remote attacker to access confidential data, compromise it...
WordPress Google Forms Plugin unauthenticated PHP Object injection vulnerability
Exploit for php platform in category web applications Abstract A PHP Object injection vulnerability was found in the Google Forms WordPress Plugin, which can be used by an unauthenticated user to instantiate arbitrary PHP Objects. Using this vulnerability it is possible to execute arbitrary PHP...
PSOProxy 0.91 Remote Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9706/info It has been reported that PSOProxy is prone to a remote buffer overflow vulnerability. The issue is due to the insufficient boundary checking. A malicious user may exploit this condition to potentially corrupt...
Multiple Vendors - RAR Handling Remote Null Pointer Dereference Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24866/info Multiple applications using RAR are prone to a NULL-pointer dereference vulnerability. A successful attack will result in denial-of-service conditions. Attackers may also be able to exploit this issue to execut...
Mandrake Linux Security Advisory : xpdf (MDKSA-2000:041-1)
There is a potential race condition when using tmpnam and fopen in xpdf versions prior to 0.91. This exploit can be only used as root to overwrite arbitrary files if a symlink is created between the calls to tmpname and fopen. There is also a problem with malicious URL-type links in PDF documents...
RainbowPlayer 0.91 SEH Overwrite
usage: exploit.py Software download: http://www.nanocodesoft.com/products/rainbowplayer/rp091.exe print "" print " RainbowPlayer 0.91 playlist Universal Seh Overwrite Exploit\n" print " Author : His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & musli...
BlogWrite 0.91 Remote FD / SQL Injection Exploit
No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
BlogWrite 0.91 - Remote File Disclosure / SQL Injection
!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...
BlogWrite 0.91 SQL Injection
!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...
BlogWrite 0.91 Remote FD / SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================ BlogWrite 0.91 Remote FD / SQL Injection Exploit ================================================ !/usr/bin/perl...
CVE-2008-3909
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...
CVE-2008-3151
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showdvd action...
CVE-2008-3151
CVE-2008-3151 describes an SQL injection in the PHP-Nuke 4ndvddb 0.91 module. The vulnerability is triggered via the id parameter in the show_dvd action, allowing remote attackers to• execute arbitrary SQL commands• potentially access or modify data in the affected database. The available connect...
PHP-NUKE SQL Module's Name 4ndvddb
Module's Name: 4ndvddb Module's Version: 0.91 +---------------------------------------+ | SQL Injection Vulnerability PHP-NUKE | Module's Name: 4ndvddb | Module's Version: 0.91 | | found by lovebug | | RBT-4 | www.rbt-4.net +---------------------------------------+ vuln:...
PYSEC-2008-1
Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...
CVE-2008-1901
CVE-2008-1901 affects aptlinex before 0.91, where a local user can overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file. The issue arises from a symlink-based race in handling the lock file, enabling local privilege impact with complete confidentiality, integrity, ...