307 matches found
CVE-2015-2135
Unspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62a, 2.00, and 2.10 allows remote attackers to execute arbitrary code via unknown vectors...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the bluez-utils-cups-2.10 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
JVN#36205251: 365 Links series vulnerable to cross-site scripting
365 Links series provided by php365.com are link directory management tools. 365 Links series contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information...
PT-2014-1975 · D Link · Dnr-326
Name of the Vulnerable Software and Affected Versions: D-Link DNR-326 versions prior to 2.10 build 03 Description: The issue is related to the check login function and is caused by weaknesses in the authentication procedure. It allows a remote attacker to bypass authentication and log in by...
FreePBX config.php Remote Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
Linksys Web Camera Software 2.10 Next_file Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10533/info It is reported that Linksys Web Camera software is prone to a cross-site scripting vulnerability that may allow a remote attacker to steal cookie-based authentication credentials or carry out other attacks. The...
Wiser 2.10 Backup Disclosure Vulnerability
Wiser version 2.10 suffers from a backup disclosure vulnerability. Wiser 2.10 SIP SERVER - Backup download vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home :...
Wiser Backup - Information Disclosure
Wiser Backup - Information Disclosure source: https://www.securityfocus.com/bid/67481/info Wiser is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download backup files that contain sensitive...
Wiser 2.10 Backup Disclosure
Wiser 2.10 SIP SERVER - Backup download vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.develsistemas.com.br/...
Wiser Backup - Information Disclosure
source: https://www.securityfocus.com/bid/67481/info Wiser is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download backup files that contain sensitive information. Information harvested may ai...
FreePBX config.php Remote Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "FreePBX config.php Remote Code Execution", 'Description' = %q This module exploits a vulnerability found in FreePBX version 2.9, 2.10...
FreePBX 2.9 Remote Command Execution
Title: FreePBX 2.9 Backup Module Remote Command Execution Vulnerability Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.freepbx.org Software Link: http://mirror.freepbx.org/freepbx-2.9.0.tar.gz Version: 2.9 and prior versions should be affected too Tested on: Linux...
CVE-2012-6520
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the 1 selectsort or 2 optsearchselect parameters. NOTE: this issue could not be reproduced by third parties...
Sql injection
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the 1 selectsort or 2 optsearchselect parameters. NOTE: this issue could not be reproduced by third parties...
CVE-2012-2099
CVE-2012-2099 concerns Wikidforum 2.10 with multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the advanced search interface: (1) search field, (2) Author, or (3) select_sort parameters. The NVD entry lists a Medium se...
UBUNTU-CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
Code injection
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument...
CVE-2012-0210
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a 1 .dsc or 2 .changes file...
Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage:...
Mozilla: Information disclosure though Windows file shares and shortcut files (MFSA 2012-37)
Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut aka .lnk file for display within an IFRAME...