squid: multiple issues

CVE-2016-4051 denial of service Due to incorrect buffer management Squid cachemgr.cgi tool is vulnerable to a buffer overflow when processing remotely supplied inputs relayed to it from Squid. - CVE-2016-4052 denial of service Due to buffer overflow issues Squid is vulnerable to a denial of...

Beckhoff CX9020 CPU Module - Remote Code Execution

!/usr/bin/env python ''' Exploit Title: Beckhoff CX9020 CPU Module Web Exploit RCE Date: 2015-10-22 Exploit Author: Photubias - tijldotdeneutathowestdotbe, based on work by Frank Lycops [email protected] Vendor Homepage: https://www.beckhoff.com/english.asp?embeddedpc/cx9020.htm...

CVE-2015-4051

Beckhoff IPC Diagnostics (before 1.8) suffers improper access control on /config, enabling remote attackers to trigger a denial of service (reboot/shutdown) and to create arbitrary users via crafted requests (SOAP to /upnpisapi). This attack surface is documented across multiple sources (NVD, CNV...

Beckhoff IPC Diagnositcs Authentication Bypass

Beckhoff IPC diagnostics 1.8 : Authentication bypass ====================================================== CVE number: CVE-2015-4051 Permalink: http://www.thesecurityfactory.be/permalink/beckhoff-authentication-bypass.html Vendor advisory:...

Microsoft Internet Explorer Multiple Vulnerabilities (2976627)

This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-4051

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2784...

CVE-2014-4051

Microsoft Internet Explorer 8–11 is affected by CVE-2014-4051, where memory corruption can be triggered by a crafted web site, potentially allowing remote code execution or a denial of service. The vulnerability is one of several IE memory-corruption-related issues reported in 2014 (distinct from...

Microsoft Internet Explorer CVE-2014-4051 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet Explorer ...

GNU libc/regcomp(3) Multiple Vulnerabilities

No description provided by source. source: http://securityreason.com/securityalert/8003 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GNU libc/regcomp3 Multiple Vulnerabilities Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 01.10.2010 - - Pub.:...

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service http://cxsecurity.com/ YouTube Kaspersky PoC: https://www.youtube.com/watch?v=joa9IS7U90 ---- 0. Where is the problem? ---- Some time ago I have reported vulnerabilities in regcomp in BSD implementation CVE-2011-3336 and GNU li...

PHPLiveHelper global.php abs_path Parameter PHP Code Execution - Ver2 (CVE-2006-4051)

A code execution vulnerability has been reported in Turnkey Web Tools PHP Live Helper. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

IBM Domino Web Administrator Multiple Vulnerabilities

The remote IBM Domino web server includes IBM Domino Web Administrator webadmin.nsf and is affected by multiple vulnerabilities : - An authenticated user can exploit an unspecified cross- site request forgery CSRF vulnerability by enticing a user to follow a specially crafted URL. CVE-2013-4050 -...

CVE-2013-4051

Cross-site scripting XSS vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4055...

Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051...

CVE-2013-4051

CVE-2013-4051 is an XSS vulnerability in IBM Domino Web Administrator (webadmin.nsf) affecting Domino 8.5 and 9.0. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The related CVE-2013-4055 is a separate XSS in the same component. Public exploit...

CVE-2011-4051

creationtimestamp| type| source ---|---|--- 2012-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21837 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/indusoftwebstudioexec.rb 2025-02-06 03:13:40+00:00...

CVE-2012-4051

CVE-2012-4051 : JAMF Casper Suite/JSS before 8.61 contains cross-site request forgery in editAccount.html that lets remote attackers hijack admin sessions to create users or change passwords via a Save action. Exploitation details and PoCs exist in multiple sources (e.g., Exploit-DB/PacketStorm)....

JAMF Casper Suite MDM Cross Site Request Forgery

CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability Exploit Title: JAMF Software's Casper Suite MDM Solution CSRF Date: Discovered and reported July 2012 Author: Jacob Holcomb/Gimppy042 Software JAMF Software Casper Suite http://jamfsoftware.com/products/casper-suite CVE : CVE-2012-4051 for...

JAMF Casper Suite MDM - Cross-Site Request Forgery

CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability Exploit Title: JAMF Software's Casper Suite MDM Solution CSRF Date: Discovered and reported July 2012 Author: Jacob Holcomb/Gimppy042 Software JAMF Software Casper Suite http://jamfsoftware.com/products/casper-suite CVE : CVE-2012-4051 for...

CVE-2011-4051

CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control...