7989 matches found
IL and CSRF vulnerabilities in D-Link DAP-1360
Hello 3APA3A! There are Information Leakage and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model with other...
ShopBuilder 5.6.1 /module/activity/admin/activity.php SQL注入漏洞
No description provided by source. !/usr/bin/env python coding=utf-8 import re import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId': '1564', 'Name': 'ShopBuilder 5.6.1 /module/activity/admin/activity.php SQL注入漏洞 POC', 'AppName': 'ShopBuilder', 'AppPowerLink':...
Threat Outbreak Alert RuleID11936: Email Messages Distributing Malicious Software on October 13, 2014
Medium Alert ID: 36055 First Published: 2014 October 13 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11936 may contain the following files: Name |...
Threat Outbreak Alert RuleID11933: Email Messages Distributing Malicious Software on October 13, 2014
Medium Alert ID: 36052 First Published: 2014 October 13 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11933 may contain the following files: Name |...
F5 Networks BIG-IP : TLS/DTLS 'Lucky 13' vulnerability (K14190)
A vulnerability exists in the TLS and DTLS protocols that may allow an attacker to recover plaintext from TLS/DTLS connections that use CBC-mode encryption. CVE-2013-0169 Note: Stream ciphers, such as RC4, are not vulnerable to this issue. C Tenable Network Security, Inc. The descriptive text and...
EMC AlphaStor Device Manager Opcode 0x75 Command Injection
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::CmdStager def initializeinfo = superupdateinfoinfo, 'Name' = 'EMC AlphaStor Device Manager Opcode 0x75 Command Injection',...
EMC AlphaStor Device Manager Opcode 0x75 Command Injection Exploit
This Metasploit module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary command injection. This Metasploit module has been tested successfully on EMC AlphaStor 4.0 build 116 with...
EMC AlphaStor Device Manager Opcode 0x75 Command Injection
require 'msf/core' class Metasploit3 'EMC AlphaStor Device Manager Opcode 0x75 Command Injection', 'Description' = %q This module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary...
EMC AlphaStor Device Manager Opcode 0x75 - Command Injection (Metasploit)
require 'msf/core' class Metasploit3 'EMC AlphaStor Device Manager Opcode 0x75 Command Injection', 'Description' = %q This module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary...
Fedora 20 : curl-7.32.0-13.fc20 (2014-10741)
use only full matches for hosts used as IP address in cookies CVE-2014-3613 - reject incoming cookies set for top level domains CVE-2014-3620 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
FreeBSD 9 Address Space Manipulation Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4...
HP Intelligent Management Center Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
leap cms 0.1.4 (sql/xss/su) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
mIRC IRC URL Buffer Overflow
No description provided by source. $Id: mircircurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
N-13 News 3.4 - Remote Admin Add CSRF Exploit
No description provided by source. ======================================================== N-13 News 3.4 Remote Admin Add CSRF Exploit ======================================================== Title: N-13 News 3.4 Remote Admin Add CSRF Exploit Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom...
N-13 News 4.0 CSRF Vulnerability (Add Admin)
No description provided by source. N-13 News 4.0 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://n-13news.googlecode.com/files/n13news4.0.1.zip .:. Tested On Demo :...
Tri-PLC Nano-10 r81 - Denial of Service
No description provided by source. Exploit Title: Tri-PLC Nano-10 DoS Date: 07/11/2013 Exploit Author: Sapling Vendor Homepage: www.tri-plc.com Version: Firmware Version r81 and prior CVE : CVE-2013-2784 ICSA: ICSA-13-189-02 / The vulnerability exists due to a flaw in the PLC's ability to handle ...
NovaSTOR NovaNET 11.0 remote DoS and arbitrary memory read
No description provided by source. source: http://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code, access sensitive information, or crash...
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
No description provided by source. $Id: adobeu3dmeshcont.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
HP ProCurve Manager SNAC UpdateCertificatesServlet File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...