phpMyAdmin 3.5.2.2 server_sync.php Backdoor

This module exploits an arbitrary code execution backdoor placed into phpMyAdmin v3.5.2.2 through a compromised SourceForge mirror. Module Options msf use exploit/multi/http/phpmyadmin/3522backdoor msf undefined3522backdoor show actions ...actions... msf undefined3522backdoor set ACTION msf...

CVE-2011-5159

Cross-site scripting XSS vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the subgroup parameter, a different vulnerability than CVE-2011-4942...

CVE-2011-5159

Cross-site scripting XSS vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the subgroup parameter, a different vulnerability than CVE-2011-4942...

CVE-2011-5159

GeSleeklog (Geeklog) vulnerability in admin/configuration.php before 1.7.1sr1 allows remote XSS via the sub_group parameter. The issue is a distinct variant from CVE-2011-4942 and arises in the subgroup parameter handling, potentially enabling script insertion. Redhat/NVD entries confirm similar ...

ZDI-12-148 : GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-148 : GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-148 August 22, 2012 - -- CVE ID: CVE-2012-0232 - -- CVSS: 9.4,...

CVE-2010-5159

Race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2010-5159

CVE-2010-5159 describes a race condition in Dr.Web Security Space Pro 6.0.0.03100 on Windows XP that allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler, via certain user-space memory changes during hook-handler execution (KHOBE/argumen...

GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy Real-Time Information Portal. Authentication is not required to exploit this vulnerability. This specific flaw exists within the Remote Interface Service rifsrvd.exe. The Remote Interfac...

WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)

$Id: wincomlpdadmin.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2008-5159

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16335 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/lpd/wincomlpdadmin.rb 2025-02-06 03:13:39+00:00| seen|...

Fedora Update for fuse FEDORA-2007-2295

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-5159

CVE-2008-5159 affects WinComLPD Total (Client Software WinCom LPD Total) up to version 3.0.2.623. The remote admin protocol processing suffers an integer overflow when handling a large string length, leading to memory corruption and remote denial of service. Public references describe a stack/rem...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 5159)

This flash player update to version 9.0.124.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-5275 / CVE-2007-6243 / CVE-2007-6637 / CVE-2007-6019 / CVE-2007-0071 / CVE-2008-1655 /...

WinComLPD Buffer Overflow

This module exploits a stack buffer overflow in WinComLPD 'WinComLPD Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in WinComLPD 'MC', 'License' = MSFLICENSE, 'References' = 'CVE', '2008-5159', 'OSVDB', '42861', 'BID', '27614', , 'DefaultOptions' = 'EXITFUNC' =...

CVE-2007-5159

CVE-2007-5159: The ntfs-3g package before 1.913-2.fc7 in Fedora 7 and ntfs-3g in Ubuntu 7.10/Gutsy assigns incorrect permissions (setuid root) to mount.ntfs-3g. This allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descript...

CVE-2006-5159

CVE-2006-5159 describes a stack-based buffer overflow in Mozilla Firefox involving JavaScript that could allow remote code execution. The incident has been disputed by the vendor and researchers, with claims that the code demonstrator only caused crashes and resource exhaustion rather than reliab...