LifeSize UVC 1.2.6 - (Authenticated) Remote Code Execution

LifeSize UVC 1.2.6 - Authenticated Remote Code Execution LifeSize UVC 1.2.6 authenticated vulnerabilities RCE as www-data: POST /server-admin/operations/diagnose/ping/ HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

LifeSize UVC 1.2.6 - (Authenticated) Remote Code Execution

LifeSize UVC 1.2.6 authenticated vulnerabilities RCE as www-data: POST /server-admin/operations/diagnose/ping/ HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8...

JJ Shoutbox, 1.2.6,

JJ Shoutbox, 1.2.6, Other Developer statement This security issue was for version 1.2.6 of JJ Shoutbox. We fixed this issue last night and released version 1.3.0 http://joomjunk.co.uk/products/module-home/shoutbox.htmlchangelog...

freeFTPd 1.2.6 - Remote Authentication Bypass

FreeFTPD all versions Remote System Level Exploit Zero-Day -- No username needed, straightforward rooting! Discovered & Exploited By Kingcope Year 2011 -- https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23079.zip Example banner: WeOnlyDo-wodFTPD 2.3.6.165 This...

FreeSSHd Remote Denial of Service Vulnerability

The host is running FreeSSHd and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodfreesshdremotedosvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ FreeSSHd Remote Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

PT-2011-4728 · Unknown · Evolve Theme

Name of the Vulnerable Software and Affected Versions: EvoLve theme versions prior to 1.2.6 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can be exploited by sending malicious input to the vulnerable endpoint...

MantisBT <= 1.2.6 XSS and SQLi Vulnerabilities

MantisBT is prone to an SQL injection SQLi and a cross-site scripting XSS vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

Debian Security Advisory DSA 2246-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 2246-1. OpenVAS Vulnerability Test $Id: deb22461.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2246-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Xataface 1.x - action Local File Inclusion

Xataface 1.x - action Local File Inclusion source: https://www.securityfocus.com/bid/48126/info Xataface is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...

WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...

Fedora 13 : webkitgtk-1.2.6-1.fc13 (2011-0121)

New stable release, API and ABI compatible with previous 1.2.x versions - Fixes crashes with newer libpng = 1.4 - The patches to fix the following CVEs are included with help from Huzaifa Sidhpurwala from the Red Hat security team CVE-2010-4198 CVE-2010-4197 CVE-2010-4204 CVE-2010-4206...

PT-2010-3447 · Apple +2 · Webkit +3

Name of the Vulnerable Software and Affected Versions: WebKit in Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vecto...

CVE-2010-3255

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

PunBB 1.3.4 Pun_PM 1.2.6 - Blind SQL Injection

PunBB 1.3.4 PunPM 1.2.6 - Blind SQL Injection !/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subjec...

Wireshark LWRES dissector buffer overflow

Added: 02/17/2010 CVE: CVE-2010-0304 BID: 37985 OSVDB: 61987 Background Wireshark is a network packet analyzer. Problem A buffer overflow vulnerability in the LWRES dissector allows command execution when a user sends a specially crafted datagram over a network which is being analyzed by Wireshar...

Wireshark LWRES dissector buffer overflow

Added: 02/17/2010 CVE: CVE-2010-0304 BID: 37985 OSVDB: 61987 Background Wireshark is a network packet analyzer. Problem A buffer overflow vulnerability in the LWRES dissector allows command execution when a user sends a specially crafted datagram over a network which is being analyzed by Wireshar...

Audacity 1.2.6 (gro File) Buffer overflow Exploit

Exploit for unknown platform in category local exploits ================================================= Audacity 1.2.6 gro File Buffer overflow Exploit ================================================= Title: Audacity 1.2.6 gro File Buffer overflow Exploit CVE-ID: OSVDB-ID: Author: Encrypt3d.M!...

CentOS Security Advisory CESA-2009:1428 (xmlsec1)

The remote host is missing updates to xmlsec1 announced in advisory CESA-2009:1428. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Stronghold 2.3 Cross Site Scripting

======================================================================================== !vuln Stronghold/2.3 Apache/1.2.6 C2NetUS/2007 Previous versions may also be affected. ========================================================================================...

CVE-2009-0490

Stack-based buffer overflow in the Stringparse::getnonspacequoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .gro file containing a long string...