996 matches found
Uebimiau 2.7.x Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25912/info UebiMiau is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks o...
LiteWEB Web Server 2.7 Invalid Page Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24628/info LiteWeb webserver is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denyi...
FeedDemon <= 3.1.0.12 Stack Buffer Overflow
No description provided by source. $Id: feeddemonopml.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
wpQuiz 2.7 - Authentication Bypass Vulnerability
No description provided by source. Powered by wpQuiz - Auth bypass Vulnerability My + Author : KnocKout + Greatz : DaiMon Contact : [email protected] Software info Script : wpQuiz Version : 2.7 Download : http://webscripts.softpedia.com/script/Quizz/wpQuiz-41098.html Vulnerability Style : Auth...
SasCam 2.7 ActiveX Head Buffer Overflow
No description provided by source. Exploit Title: SasCam 2.7 ActiveX Head Buffer Overflow Date: July 4, 2010 Author: Blake Software Link:http://download.cnet.com/SasCam-Webcam-Server/3000-23484-10491197.html Version: 2.7 Tested on: Windows XP SP3 / IE6 and 7 html object...
Bit Weaver 2.7 - Local File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Bit Weaver 2.7 Vulnerability...........Local File Inclusion Download................http://www.bitweaver.org/ Release Date............7/1/2010 Tested...
SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit
No description provided by source. !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the process list for the...
CVE-2014-4616
Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...
ClipBucket < 2.7 XSS Vulnerability - Active Check
ClipBucket is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Python 'Hash Collision' Denial of Service Vulnerability - Windows
Python is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescripti...
CVE-2013-7040
Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service CPU consumptio...
CVE-2013-7040
CVE-2013-7040 affects Python 2.7 before 3.4. The issue stems from Python’s hash randomization using only the last eight bits of the prefix, which can enable context-dependent attackers to trigger hash collisions and cause a denial of service (CPU consumption) in applications that rely on hash tab...
Sitestar 2.7 /mod_auth.php 本地文件包含漏洞
No description provided by source...
Sitestar 2.7 /mod_email.php SQL注入漏洞
No description provided by source...
SuSE 11.3 Security Update : puppet (SAT Patch Number 9033)
The deployment framework puppet received an update for a security issue in January. The backport of this security issue was however incomplete and broke existing setups. As the scope of the problem is limited to local scenarios where an attacker likely has access already, and backporting is not...
SiteStar 2.7 /module/mod_tool.php 文件上传漏洞
No description provided by source...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
WebPagetest 'file' parameter Local File Disclosure Vulnerability
WebPagetest is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VICIdial Manager Send OS Command Injection
The file agc/managersend.php in the VICIdial web application uses unsanitized user input as part of a command that is executed using the PHP passthru function. A valid username, password and session are needed to access the injection point. Fortunately, VICIdial has two built-in accounts with...
Puppet 2.7.x / 3.2.x < 2.7.23 / 3.2.4 and Enterprise 2.8.x / 3.0.x < 2.8.3 / 3.0.1 Multiple Vulnerabilities
According to its self-reported version number, the Puppet install on the remote host has multiple vulnerabilities: - By using the 'resourcetype' service, an attacker could cause Puppet to load arbitrary Ruby files from the Puppet Master node's file system. While this behavior is not enabled by...