MantisBT < 1.3.12, 2.x < 2.5.2 Multiple XSS Vulnerabilities - Windows

MantisBT is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Knot DNS Server Security Bypass Vulnerability (Jun 2017)

A flaw was found in the way Knot handled TSIG authentication for dynamic updates. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2017-11743 · Cz.Nic +1 · Knot Dns +1

Name of the Vulnerable Software and Affected Versions: Knot DNS versions prior to 2.4.5 Knot DNS versions 2.5.x prior to 2.5.2 Description: The issue is related to a flaw in the TSIG protocol implementation. This flaw allows an attacker with a valid key name and algorithm to bypass TSIG...

Joomla! 2.5.2 - Admin Creation Exploit

Exploit for php platform in category web applications !/usr/bin/python3 CVE-2012-1563: Joomla! = 2.5.2 Admin Creation cf import bs4 import requests import random url = 'http://vmweb.lan/joomla-cms-2.5.2/' formurl = url +...

Joomla! 2.5.2 - Admin Creation

Joomla! 2.5.2 - Admin Creation !/usr/bin/python3 CVE-2012-1563: Joomla! = 2.5.2 Admin Creation cf Source: https://www.ambionics.io/blog/cve-2016-9838-joomla-account-takeover-and-remote-code-execution import bs4 import requests import random url = 'http://vmweb.lan/joomla-cms-2.5.2/' formurl = url...

Multiple Command Injection Vulnerabilities in Veil-Evasion RPC

Veil-Evasion is a suite of tools designed specifically for generating kill-free MSFPAYLOAD. A command injection vulnerability exists in Veil-Evasion versions 2.5.2 through 2.24, which can be exploited by an attacker to execute arbitrary commands in an affected application...

CVE-2008-4977

postfixgroups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/postfixgroups.stdout, 2 /tmp/postfixgroups.stderr, and 3 /tmp/postfixgroups.message temporary files. NOTE: the vendor disputes this vulnerability, stating "This is not a real issue...

FineCMS 2.5.2 /controllers/member/ContentController.php SQL注入

No description provided by source...

FineCMS 2.5.2 /extensions/ucenter/api/uc.php 代码执行

No description provided by source...

Endian Firewall < 3.0.0 - OS Command Injection (Metasploit Module) Exploit

Exploit for cgi platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Endian Firewall %q This module exploits an OS command injection vulnerability i...

WordPress WP-Stats plugin has multiple vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. HTML injection vulnerability and cross-site scripting vulnerability exis...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libpurple-devel-2.5.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

WordPress Work The Flow Plugin File Upload Vulnerability

WordPress Work The Flow File Upload Plugin is prone to arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Wordpress Work-The-Flow Plugin 2.5.2 Upload Exploit

This Metasploit module exploits an arbitrary PHP code upload in the WordPress Work The Flow plugin, version 2.5.2. The vulnerability allows for arbitrary file upload and remote code execution. This module requires Metasploit: http://metasploit.com/download Current source:...

WordPress Work The Flow File Upload 2.5.2 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Work the flow file upload 2.5.2 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/work-the-flow-file-upload.2.5.2.zip Date : 2015-03-14 Tested on : Linu...

DukaPress 2.5.2 Path Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: DukaPress 2.5.2 Path Traversal Date: 27-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl Software Link: https://downloads.wordpress.org/plugin/dukapress.2.5.2.zip Category: webapps CVE: CVE-2014-8799 1...

Moodle Remote Command Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit4 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::Tcp...

CVE-2013-3630

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor...

Moodle Remote Command Execution Vulnerability

Moodle allows an authenticated user to define spellcheck settings via the web interface. The user can update the spellcheck mechanism to point to a system-installed aspell binary. By updating the path for the spellchecker to an arbitrary command, an attacker can run arbitrary commands in the...

Moodle Remote Command Execution

Moodle allows an authenticated user to define spellcheck settings via the web interface. The user can update the spellcheck mechanism to point to a system-installed aspell binary. By updating the path for the spellchecker to an arbitrary command, an attacker can run arbitrary commands in the...