687 matches found
Arbitrary file deletion
ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...
CVE-2012-4518
ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...
CVE-2012-4518
CVE-2012-4518 affects ibacm 1.0.7, where files are created with world-writable permissions. This allows local users to overwrite the ib_acm daemon log or ibacm.port, enabling potential local impact. The connected Nessus entries corroborate the issue as part of MiracleLinux/Oracle Linux advisories...
PT-2012-5456 · Intel +2 · Ibacm +2
Name of the Vulnerable Software and Affected Versions: ibacm version 1.0.7 Description: The issue allows local users to overwrite the ib acm daemon log or ibacm.port file due to world-writable permissions set by ibacm 1.0.7. Recommendations: For ibacm version 1.0.7, consider changing the file...
CVE-2012-0065
Heap-based buffer overflow in the receivepacket function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list...
CVE-2012-0065
Heap-based buffer overflow in the receivepacket function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list...
PT-2012-2270 · Libusbmuxd · Usbmuxd
Name of the Vulnerable Software and Affected Versions: usbmuxd versions 1.0.5 through 1.0.7 Description: A heap-based buffer overflow issue exists in the receive packet function in libusbmuxd/libusbmuxd.c. This allows physically proximate attackers to execute arbitrary code via a long SerialNumbe...
Slackware: Security Advisory (SSA:2006-357-03)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Plugin TinyMCE Thumbnail Gallery 1.0.7 - Remote File Disclosure
WordPress Plugin TinyMCE Thumbnail Gallery 1.0.7 - Remote File Disclosure Description : Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure Vulnerability Version : 1.0.7 Link : http://wordpress.org/extend/plugins/tinymce-thumbnail-gallery/ Plugins :...
WordPress Tinymce Thumbnail Gallery 1.0.7 File Disclosure
Description : Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure Vulnerability Version : 1.0.7 Link : http://wordpress.org/extend/plugins/tinymce-thumbnail-gallery/ Plugins : http://downloads.wordpress.org/plugin/tinymce-thumbnail-gallery.zip Date : 25-05-2012 Google Dork :...
WordPress Plugin TinyMCE Thumbnail Gallery 1.0.7 - Remote File Disclosure
Description : Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure Vulnerability Version : 1.0.7 Link : http://wordpress.org/extend/plugins/tinymce-thumbnail-gallery/ Plugins : http://downloads.wordpress.org/plugin/tinymce-thumbnail-gallery.zip Date : 25-05-2012 Google Dork :...
Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure
Exploit for php platform in category web applications Description : Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure Vulnerability Version : 1.0.7 Link : http://wordpress.org/extend/plugins/tinymce-thumbnail-gallery/ Plugins :...
Buffer overflow
Buffer overflow in ngxhttpmp4module.c in the ngxhttpmp4module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted MP4 file...
DIGIT CMS 1.0.7 - Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/51316/info DIGIT CMS is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...
DIGIT CMS 1.0.7 - Cross-Site Scripting SQL Injection
DIGIT CMS 1.0.7 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/51316/info DIGIT CMS is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issu...
phpMyRealty <= 1.0.7 'seed' Parameter SQLi Vulnerability
phpMyRealty is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
WordPress Easy Contact Form Lite plugin <= 1.0.7 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Easy Contact Form Lite plugin = 1.0.7 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/easy-contact-form-lite.zip Version:...
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE...
WordPress Easy Contact Form Lite plugin <= 1.0.7 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE...
Wireshark SigComp Universal Decompressor Virtual Machine dissector DOS Vulnerability (Windows)
This host is installed with Wireshark and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodwiresharksigcompdissectordosvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Wireshark SigComp Universal Decompressor Virtual Machine dissector DOS Vulnerability Windows...