11633 matches found
CVE-2012-4451
Multiple cross-site scripting XSS vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 Debug, 2 Feed\PubSubHubbub, 3 Log\Formatter\Xml, 4 Tag\Cloud\Decorator, 5 Uri, 6 View\Helper\HeadStyle, 7...
Small CRM 2.0 SQL Injection
Exploit Title: Small CRM 2.0 - Authentication Bypass Google Dork: N/A Date: 2020-01-02 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/small-crm-php/ Version: V2.0 Tested on: Windows CVE : N/A Description: There is a SQL injection...
EulerOS 2.0 SP8 : libmspack (EulerOS-SA-2020-1014)
According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - DISPUTED chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative...
EulerOS 2.0 SP8 : tar (EulerOS-SA-2020-1035)
According to the version of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be us...
EulerOS 2.0 SP8 : golang (EulerOS-SA-2020-1008)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Go before 1.10.6 and 1.11.x before 1.11.3, the 'go get' command is vulnerable to directory traversal when executed with the import path of a...
EulerOS 2.0 SP8 : libarchive (EulerOS-SA-2020-1013)
According to the version of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - archivereadformatrarreaddata in archivereadsupportformatrar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVEFAILED...
CVE-2004-2776
go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 query string or 2 artarchive parameter...
Photon OS 2.0: Python3 PHSA-2019-2.0-0187
An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Libpcap PHSA-2019-2.0-0187
An update of the libpcap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Binutils PHSA-2019-2.0-0190
An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Linux PHSA-2019-2.0-0189
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0189. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132539...
NewStart CGSL CORE 5.05 / MAIN 5.05 : mod_auth_openidc Multiple Vulnerabilities (NS-SA-2019-0243)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has modauthopenidc packages installed that are affected by multiple vulnerabilities: - The OpenID Connect Relying Party and OAuth 2.0 Resource Server aka modauthopenidc module before 2.1.6 for the Apache HTTP Server does not sk...
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
Dovecot 2.0.x < 2.0.16 Man In The Middle Vulnerability
Dovecot is prone to a man-in-the-middle vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...
Wave 2.0 SQL Injection
=========================================================================================== Exploit Title: Wave - Powerful Freelance Marketplace System SQL Inj. Dork: N/A Date: 29-12-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...
CVE-2014-5289
Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request...
Buffer overflow
Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request...
CVE-2014-5289
CVE-2014-5289 is a stack/remote buffer overflow in SENKAS Kolibri Webserver 2.0 where improper validation of input in HTTP POST handling allows a remote attacker to execute arbitrary code. Public reports (SAINT, EXPLOIT-DB, Seebug) describe a user-supplied long URI in POST requests as the trigger...