6545 matches found
Solaris 10 (sparc) : 151934-04 (deprecated)
VM Server for SPARC 3.2 ldmd patch. Date this patch was last updated by Sun : Dec/02/17 This plugin has been deprecated and either replaced with individual 151934 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
1 Click Extract Audio 2.3.6 - Activex Buffer Overflow Exploit
Exploit for windows platform in category local exploits 1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the...
w3tw0rk / Pitbul IRC Bot Remote Code Execution
This module allows remote command execution on the w3tw0rk / Pitbul IRC Bot. Module Options msf use exploit/multi/misc/w3tw0rk/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf undefinedexec run This module...
Avsarsoft Matbaa Script - Multiple Vulnerabilities
Title : Avsarsoft Matbaa Script - Multiple Vulnerabilities Author : ZoRLu / [email protected] Website : milw00rm.com / milw00rm.net / milw00rm.org Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultimate Discovery : 15/04/15 Publish : 23/04/15 Thks : exploit-db.com,...
[CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI & CSRF Security Vulnerabilities
Exploit Title: Landesk Management Suite RFI and CSRF vulnerabilities Product: Landesk Management Suite Vulnerable Versions: 9.5 and possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: 16/04/2015 Latest Update: 16/04/2015 Vulnerability Type: Cross-site request forgery CWE-352...
SynTail 1.5 Build 566 - CSRF / XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiple vulnerabilities in SynTail 1.5 Build 566 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: email protected Vendor Homepage: http://www.synametrics.com Software Link:...
WebUI 1.5b6 - Remote Code Execution
WebUI 1.5b6 - Remote Code Execution + Author: TUNISIAN CYBER + Title: WebUI Remote Code Execution Vulnerability + Date: 21-04-2015 + Vendor: https://github.com/baram01/webui/ + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R + Proof of concept: http://i.imgur.com/co9Qx0n.png...
Open-Letters Remote PHP Code Injection Exploit
Exploit for php platform in category web applications / errorreporting0; settimelimit0; iniset"defaultsockettimeout", 5; function httpsend$host, $packet if !$sock = fsockopen$host, 80 die "\n- No response from $host:80\n"; fwrite$sock, $packet; return streamgetcontents$sock; print "+ Author:...
WordPress WP-Mon Arbitrary File Download
|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Wordpress wp-mon Plugin Arbitrary File Download Vulnerability | | + Exploit Author: Ashiyane Digital Security Team | | + Vendor Homepage :...
Microsoft patch day 2015-4-14: the repair of many high-risk IE, Windows, Office vulnerabilities-vulnerability warning-the black bar safety net
Monthly the second Tuesday, Microsoft fixed the patch to fix the day, Microsoft on Tuesday（2015-4-14 the“patch day”on repairing a large number of vulnerabilities, which includes many IE, Windows, Office, high-risk vulnerabilities. Update announcement MS15-0 3 4 announcement MS15-0 3 4 announcemen...
CVE-2015-1119
Summary: CVE-2015-1119 affects WebKit as used in Apple iOS pre-8.3, Apple TV pre-7.2, and Apple Safari pre-6.2.5, 7.x pre-7.1.5, and 8.x pre-8.0.5. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, as described in multiple sources. Root cause...
CVE-2015-1121
CVE-2015-1121 affects WebKit as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, through memory corruption and a...
Adobe Flash Player Null Pointer Dereference (APSB15-04: CVE-2015-0328)
A null pointer dereference vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a null pointer dereference while accessing a malformed swf file. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted swf file...
Adobe Flash Player Memory Corruption (APSB15-04: CVE-2015-0321)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
Adobe Flash Use After Free Code Execution (APSB15-04: CVE-2015-0320)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Adobe Flash Player Type Confusion Code Execution (APSB15-04: CVE-2015-0317)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...
Adobe Flash Player Memory Corruption (APSB15-04: CVE-2015-0314)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
flash-plugin: multiple code execution flaws (APSB15-04)
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...
flash-plugin: multiple code execution flaws (APSB15-04)
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0314,...
flash-plugin: multiple code execution flaws (APSB15-04)
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via unknown vectors, a different vulnerability than...