190 matches found
ecshopๆๆฐ็csrf ไธ่ฝฝๆฐๆฎๅบ
็ฎ่ฆๆ่ฟฐ๏ผ ๅคช้ณๅบไธ ่ฏฆ็ป่ฏดๆ๏ผ ๆต่ฏ็ๆฌ๏ผๆๆฐ็2.7.4 beta1 ็ฎๆต2.7.3ๆๆ็ๆฌไน้ฝๆฒกๆtoken ๆฒกๆๆฐ้ฒไบใ็ฟปไบๅฅฝๅ ้ๅๅๆผๆดๅ่กจ๏ผ็กฎๅฎๆฒก็ๅฐๆไบบๆ่ฟใ ๅคไปฝๆฐๆฎๅบ็ๅ่ฝใ ่ฏทๆฑๅฆไธ๏ผๆไธไธชtoken็ๅญๆฎต๏ผไฝๆฏ้ป่ฎคไธบ็ฉบ๏ผๆๅก็ซฏไนๆฒกๆๆฃๆฅ่ฏฅๅญๆฎต๏ผ็ดๆฅไธบ็ฉบๅฐฑๅฏไปฅ่ฏทๆฑๆๅใ ๅๆ ท๏ผๅๅ้็จไบไฝฟ็จreferer็ๆนๅผๆฅ้ฒๅพกcsrf๏ผๅช่ฆไธบ็ฉบๅฐฑๅฏไปฅ็ป่ฟใๅฏไปฅ่ฏดๆฏ่ฟ็ง้ฒๅพกๆฏๆฒกๆๆๆ็ใ ๆ้ ๅฅฝexp๏ผ็ฎก็ๅ็นๅปไนๅ๏ผๅจweb็ฎๅฝไธ็ๆ็จๆทๅฏๆงๆไปถๅ็sqlๆไปถใๅฏไปฅ็ดๆฅไธ่ฝฝใ ๆผๆด่ฏๆ๏ผ https://images.seebug.org/upload/201409/12165...
LeapFTP Client 2.7.3/2.7.4 LSQ File Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14655/info LeapFTP client is prone to a remote buffer overflow vulnerability. The issue arises when the client handles a malformed LeapFTP Site Queue .lsq file. A remote attacker may gain unauthorized access in the contex...
PT-2013-3377 ยท Pythonย +4 ยท Pythonย +4
Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.6.9 Python versions prior to 2.7.4 Python versions prior to 2.7.6 Python versions prior to 3.3.3 Description: The issue is related to various Python modules, including httplib, ftplib, imaplib, nntplib, poplib, and...
Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Denial of service vulnerability product: Apache CXF vulnerable version: Apache CXF prior to 2.5.10, 2.6.7 and 2.7.4 fixed version: Apache CXF 2.5.10, 2.6.7 and 2.7.4...
ModSecurity ็ฉบๆ้้ดๆฅๅผ็จ่ฟ็จๆ็ปๆๅกๆผๆด(CVE-2013-2765)
BUGTRAQ ID: 60182 CVECAN ID: CVE-2013-2765 ModSecurity 2.7.4ไนๅ็ๆฌๅญๅจๆ็ปๆๅกๆผๆด๏ผๆปๅป่ ๅฏๅฉ็จๆญคๆผๆดไฝฟApache Webๆๅกๅจๅดฉๆบใๆญคๆผๆดๆบไบ"forceRequestBodyVariable"ๆไฝๅ ็ๅค็้่ฏฏ๏ผ้่ฟ็นๅถ็HTTP่ฏทๆฑๅฏ้ ๆ็ฉบๆ้้ดๆฅๅผ็จใ 0 modsecurity 2.x ๅๅ่กฅไธ๏ผ modsecurity ----------- ็ฎๅๅๅๅทฒ็ปๅๅธไบๅ็บง่กฅไธไปฅไฟฎๅค่ฟไธชๅฎๅ จ้ฎ้ข๏ผ่ฏทๅฐๅๅ็ไธป้กตไธ่ฝฝ๏ผ http://sourceforge.net/projects/mod-security/...
Upgrade ModSecurity to version 2.7.4 for fixing Denial of Service Vulnerability
ModSecurity is an open source web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. ModSecurity developers team recently fixed a vulnerability CVE-2013-2765 which could be exploited...
Upgrade ModSecurity to version 2.7.4 for fixing Denial of Service Vulnerability
ModSecurity is an open source web application firewall. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. ModSecurity developers team recently fixed a vulnerability CVE-2013-2765 which could be exploited...
CVE-2011-4188
Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service application crash or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929...
Postfix SMTP Server Cyrus SASL Support Memory Corruption Vulnerability
Postfix SMTP server is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)
On-line version will be at http://www.postfix.org/CVE-2011-1720.html Summary ======= The Postfix SMTP server has a memory corruption error when the Cyrus SASL library is used with authentication mechanisms other than PLAIN and LOGIN the ANONYMOUS mechanism is unaffected but should not be enabled...
Ariadne 2.7.4 Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Ariadne 2.7.4 (CSRF) Change Administrator Password
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Ariadne 2.7.4 Cross Site Request Forgery
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Pidgin Libpurple 'purple_base64_decode()' Denial of Service Vulnerabilities (Windows)
This host has Pidgin installed and is prone to Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginlibpurplemultdosvulnwin.nasl 5373 2017-02-20 16:27:48Z teissa $ Pidgin Libpurple 'purplebase64decode' Denial of Service Vulnerabilities Windows Authors: Antu Sanadi Copyright:...
Pidgin Libpurple 'purple_base64_decode()' DoS Vulnerabilities - Windows
Pidgin is prone to denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3711
CVE-2010-3711 affects libpurple in Pidgin up to version 2.7.3; the bug arises from not properly validating the return value of purple_base64_decode, allowing remote authenticated users to trigger a NULL pointer dereference and crash via crafted messages. Affected components include MSN, MySpaceIM...
[ MDVSA-2010:208 ] pidgin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:208 http://www.mandriva.com/security/ Package : pidgin Date : October 21, 2010 Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A security vulnerability has been identified and...
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.4-alt1
Oct. 21, 2010 Slava Semushin 2.7.4-alt1 - Updated to 2.7.4 + CVE-2010-3711: eight DoS conditions in libpurple...
Novell iManager EnteredClassName buffer overflow
Added: 07/12/2010 CVE: CVE-2010-1929 BID: 40480 OSVDB: 65737 Background Novell iManager is a web-based management interface for other Novell products. Problem A buffer overflow vulnerability in jclient.dll allows remote attackers to execute arbitrary commands by sending a specially crafted...
Novell iManager EnteredClassName buffer overflow
Added: 07/12/2010 CVE: CVE-2010-1929 BID: 40480 OSVDB: 65737 Background Novell iManager is a web-based management interface for other Novell products. Problem A buffer overflow vulnerability in jclient.dll allows remote attackers to execute arbitrary commands by sending a specially crafted...