CVE-2018-5954

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands...

PHPFreeChat 1.7 Denial Of Service

Exploit Title: phpFreeChat 1.7 and earlier - Denial of Service Version: 1.7 and earlier Date: 21/01/2018 Vendor Homepage: http://www.phpfreechat.net Software Link: http://www.phpfreechat.net/download Exploit Author: A. Pakbaz CVE : CVE-2018-5954 1 $pid=pcntlfork; if$pid0 echo "\nError!...

PHPFreeChat 1.7 - Denial of Service Exploit

Exploit for php platform in category web applications Exploit Title: phpFreeChat 1.7 and earlier - Denial of Service Version: 1.7 and earlier Date: 21/01/2018 Vendor Homepage: http://www.phpfreechat.net Software Link: http://www.phpfreechat.net/download Exploit Author: A. Pakbaz CVE : CVE-2018-59...

PHPFreeChat 1.7 - Denial of Service

PHPFreeChat 1.7 - Denial of Service Exploit Title: phpFreeChat 1.7 and earlier - Denial of Service Version: 1.7 and earlier Date: 21/01/2018 Vendor Homepage: http://www.phpfreechat.net Software Link: http://www.phpfreechat.net/download Exploit Author: A. Pakbaz CVE : CVE-2018-5954 1 $pid=pcntlfor...

PHPFreeChat 1.7 - Denial of Service

Exploit Title: phpFreeChat 1.7 and earlier - Denial of Service Version: 1.7 and earlier Date: 21/01/2018 Vendor Homepage: http://www.phpfreechat.net Software Link: http://www.phpfreechat.net/download Exploit Author: A. Pakbaz CVE : CVE-2018-5954 1 $pid=pcntlfork; if$pid0 echo "\nError! Reduce the...

CVE-2017-5954

An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression IIFE...

CVE-2017-5954

The CVE-2017-5954 entry concerns the Node.js package serialize-to-js (v0.5.0). An attacker can inject untrusted data into deserialize() to achieve arbitrary code execution via a JavaScript Object containing an IIFE. Documented references (OSV GHSA and npm advisories) confirm a remote code executi...

CVE-2017-5954

An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression IIFE...

CVE-2016-5954

CVE-2016-5954 affects IBM WebSphere Portal versions 6.1.0 to 6.1.0.6 CF27, 6.1.5 to 6.1.5.3 CF27, 7.0.0 to 7.0.0.2 CF30, 8.0.0 to 8.0.0.1 CF21, and 8.5.0 before CF12. The vulnerability allows remote authenticated users to cause a denial of service by uploading temporary files. Public sources in t...

CVE-2016-5954

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...

CVE-2015-5954

The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5 does not consider that NULL is a valid getPath return value, which allows remote authenticated users to bypass intended access restrictions and gain access to users files via a sharing link to a fil...

CVE-2015-5954

The CVE-2015-5954 issue affects ownCloud Server: vulnerable versions include 6.0.x before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5. The root cause is that the virtual filesystem does not treat NULL as a valid getPath return value in a sharing context, allowing remote authenticated users ...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

Disclosure of users files when deleting parent folders of shared files - ownCloud

Due to a common incorrect usage of the getPath function of the ownCloud virtual filesystem multiple security issues occurred. Especially the function may return null in case the specified file does not exist anymore. When passing the result of getPath in combination with null to functions that...

CVE-2014-5954

The CVE-2014-5954 entry concerns the State Bank Anywhere (com.sbi.SBIFreedomPlus) Android app 2.0.1, which does not verify X.509 certificates from SSL servers. This certificate validation failure enables man-in-the-middle attackers to spoof SSL servers and obtain sensitive information via a craft...

CVE-2013-5954

CVE-2013-5954 describes multiple CSRF vulnerabilities in OpenX 2.8.11 and earlier, exploited via GET requests that delete data (e.g., users, advertisers, banners, campaigns, channels, affiliate websites, zones) in Revive Adserver/OpenX administration. The Revive Adserver advisory confirms these i...

CVE-2013-5954

creationtimestamp| type| source ---|---|--- 2014-03-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39117...

CVE-2012-5954

CVE-2012-5954 affects IBM Tivoli Storage Manager for Space Management (TSM HSM). The issue allows a remote attacker to read or modify HSM-managed file system objects via unknown vectors in affected versions: HSM before 6.2.5.0 and 6.3.x before 6.3.1.0. IBM bulletin details remediation: upgrade to...