WinaXe 7.7 FTP Client Remote Buffer Overflow

This module exploits a buffer overflow in the WinaXe 7.7 FTP client. This issue is triggered when a client connects to the server and is expecting the Server Ready response. Module Options msf use exploit/windows/ftp/winaxe/serverready msf undefinedserverready show actions ...actions... msf...

crdn.ifas.ufl.edu XSS vulnerability

Vulnerable URL: https://crdn.ifas.ufl.edu/search/ajaxsearch.jsp?site=crdn.ifas.ufl.edu="=+++Go+++ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

kibana: XSS vulnerability ESA-2016-03

A cross-site scripting XSS flaw was found in Kibana. A remote attacker could use this flaw to inject arbitrary web script into pages served to other users...

IpNetCam A107WIRF-HNH-03 IP-Camera 0.376.223 Authentication Bypass

IpNetCam A107WIRF-HNH-03 IP-Camera auth bypass configuration download Release: 0.376.223 Copyright 2016 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permission. T...

Solaris 10 (x86) : 152101-62 (deprecated)

JavaSE 8x86: update 162 patch equivalent to JDK 8u162, 64bit. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152101 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

mazandaran.parsonline.com XSS vulnerability

Vulnerable URL: http://mazandaran.parsonline.com/search/"autofocus+onfocus="alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

About Apache Struts 2 S2-0 3 2 vulnerability threat monitoring and emergency disposal of the case Bulletin-vulnerability warning-the black bar safety net

4 the end of the month, the Apache struts2 S2-0 3 2 remote code execution vulnerability CNVD-2 0 1 6-0 2 5 0 6, The CVE-2 0 1 6-3 0 8 1, hereinafter referred to as S2-0 3 2 vulnerability, the exploit code is disclosed and in a short time spread rapidly. CNVD Secretariat-National Internet emergenc...

CVE-2016-1761

libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML document...

CVE-2016-1741

creationtimestamp| type| source ---|---|--- 2016-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39615...

Joomla Easy Youtube Gallery 1.0.2 SQL Injection

Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory Date: 2016/03/22 Version: 1.0.2 PoC: mycategory=SQL...

Hi Technology & Services CMS - SQL Injection Vulnerabilities

Document Title: =============== Hi Technology & Services CMS - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1785 Release Date: ============= 2016-03-22 Vulnerability Laboratory ID VL-ID: ==================================...

Mallbuilder lostpass.php 文件 userid 参数SQL注入漏洞

0x01 漏洞概述 相关厂商： 上海远丰信息科技有限公司 官方主页： shop-builder.cn 提交时间： 2014-06-03 公开时间： 2014-09-01 漏洞类型： SQL注射漏洞 谷歌关键字： powered by mallbuilder 0x02 漏洞详情 首先来看看全局文件 function magic if!getmagicquotesgpc&&isset$POST foreach$POST as $key=$v if!isarray$v $POST$key=addslashes$v; else foreach$v as $skey=$sv if!isarray$...

CVE-2016-0820

The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358...

CVE-2016-0831

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...

Adobe Photoshop CC < 15.2.4 / 16.1.2 Multiple Memory Corruption Vulnerabilities (APSB16-03) (Mac OS X)

The version of Adobe Photoshop installed on the remote Mac OS X host is prior to 15.2.4 2014.2.4 or 16.1.2 2015.1.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these...

Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption (2)

Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption 2 Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0952 Author: Franci...

Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (2)

Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0952 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report...

scotr.com XSS vulnerability

Vulnerable URL: http://www.scotr.com/se?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.04.2016 Latest check for patch:| 03.04.2016 10:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 286540 Goog...

GLSA-201512-03 : GRUB: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-201512-03 GRUB: Authentication bypass An integer underflow in GRUBs username/password authentication code has been discovered. Impact : An attacker with access to the system console may bypass the username prompt by entering a...

Cambium ePMP 1000 - Multiple Vulnerabilities

Cambium ePMP 1000 - Multiple Vulnerabilities July 14, 2015: First contacted Cambium July 14, 2015: Initial vendor response July 16, 2015: Vuln Details reported to Cambium July 31, 2015: Followup on advisory and fix timelines August 03, 2015: Vendor gives mid-Aug as fix v2.5 release timeline. Ceas...