1406 matches found
Stack overflow
Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments, as demonstrated by...
CVE-2011-3874
CVE-2011-3874 describes a use-after-free vulnerability in Android’s libsysutils, triggered via FrameworkListener::dispatchCommand when invoked with an incorrect number of arguments. Affected Android versions are 2.2.x–2.2.2 and 2.3.x–2.3.6. The issue was demonstrated by zergRush and, per sources,...
Traq 2.3 RCE
Remote code execution vulnerability in Traq Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Design/Logic Flaw
The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...
CVE-2011-4276
The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...
[SECURITY] Fedora 15 Update: xkeyboard-config-2.3-3.fc15
This package contains configuration data used by the X Keyboard Extension XKB, which allows selection of keyboard layouts when using a graphical interface...
Unrestricted file upload
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory...
Traq 2.3 Authentication Bypass / Remote Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Traq %q This modu...
Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Traq %q This modu...
Traq 'authenticate()'函数远程代码执行漏洞
Bugtraq ID: 50961 Traq是一款基于PHP/MySQL的项目管理软件 定义在/admincp/common.php中的authenticate函数存在错误： 27. function authenticate 28. 29. global $user; 30. 31. if!$user-group'isadmin' 32. header"Location: login.php"; 33...
Traq 2.3 Authentication Bypass / Code Execution
group'isadmin' 32. header"Location: login.php"; 33. This function is called in each script located into /admicp/ directory to make sure the user has admin rights, but this is a broken authorization schema due to the header function doesn't stop the execution flow. This can be exploited by malicio...
Traq 2.3 - Authentication Bypass / Remote Code Execution
group'isadmin' 32. header"Location: login.php"; 33. This function is called in each script located into /admicp/ directory to make sure the user has admin rights, but this is a broken authorization schema due to the header function doesn't stop the execution flow. This can be exploited by malicio...
Traq 2.3 - Authentication Bypass Remote Code Execution
Traq 2.3 - Authentication Bypass Remote Code Execution group'isadmin' 32. header"Location: login.php"; 33. This function is called in each script located into /admicp/ directory to make sure the user has admin rights, but this is a broken authorization schema due to the header function doesn't st...
Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station
Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...
QuiXplorer 2.3 - Bugtraq Arbitrary File Upload
Exploit Title: QuiXplorer 2.3 = Bugtraq File Upload Vulnerability Google Dork: "QuiXplorer 2.3 - the QuiX project" Date: 13/11/2011 Author: PCA & krhrkrhr and Software Link: http://quixplorer.sourceforge.net/ Version: QuiXplorer 2.3 Tested on: linux ,windows CVE :...
QuiXplorer 2.3 - Bugtraq Arbitrary File Upload
QuiXplorer 2.3 - Bugtraq Arbitrary File Upload Exploit Title: QuiXplorer 2.3 = Bugtraq File Upload Vulnerability Google Dork: "QuiXplorer 2.3 - the QuiX project" Date: 13/11/2011 Author: PCA & krhrkrhr and Software Link: http://quixplorer.sourceforge.net/ Version: QuiXplorer 2.3 Tested on: linux...
QuiXplorer 2.3 <= Bugtraq File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: QuiXplorer 2.3 = Bugtraq File Upload Vulnerability Google Dork: "QuiXplorer 2.3 - the QuiX project" Date: 13/11/2011 Author: PCA & krhrkrhr and Software Link: http://quixplorer.sourceforge.net/ Version: QuiXplorer 2.3 Tested on:...
CVE-2010-5010
Cross-site scripting XSS vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter...