CVE-2020-5972

NVIDIA vGPU software vulnerability CVE-2020-5972 affects the vGPU plugin in NVIDIA Virtual GPU Manager. The root cause is uninitialized local pointer variables that may be freed later, enabling tampering or denial of service. Affected product lines include vGPU versions 8.x (pre-8.4), 9.x (pre-9....

WordPress Online Lesson Booking Plugin < 0.8.7 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2019-5972

CVE-2019-5972 affects the WordPress plugin Online Lesson Booking (versions 0.8.6 and earlier). It is a stored cross-site scripting (CWE-79) vulnerability that could allow remote attackers to inject arbitrary script/HTML, potentially executing in the browser of users with administrative privileges...

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

CVE-2018-5972

The CVE corresponds to a SQL injection in Classified Ads CMS Quickad 4.0. Public sources (CNVD-2018-04366, CVE/NVD records, and mirrors) describe exploitation via the listing URI parameters keywords, placeid, cat, or subcat. The root cause is a SQL injection vulnerability in Quickad 4.0 implement...

Quickad 4.0 SQL Injection

Exploit Title: Classified Ads CMS - Quickad 4.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/quickad-classified-ads-php-script/19960675 Version: 4.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5972...

Quickad 4.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Classified Ads CMS - Quickad 4.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/quickad-classified-ads-php-script/19960675 Version: 4.0 Category: Webap...

Quickad 4.0 - SQL Injection

Quickad 4.0 - SQL Injection Exploit Title: Classified Ads CMS - Quickad 4.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/quickad-classified-ads-php-script/19960675 Version: 4.0 Category: Webapps Tested on:...

Quickad 4.0 - SQL Injection

Exploit Title: Classified Ads CMS - Quickad 4.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/quickad-classified-ads-php-script/19960675 Version: 4.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5972...

CVE-2015-5972

...

CVE-2015-5972

CVE-2015-5972 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-5972

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service CPU consumption by sending many TCP SYN packets, as demonstrated by an attack against the...

CVE-2017-5972

CVE-2017-5972 affects the Linux kernel 3.x TCP stack. The issue is that SYN cookies protection is not correctly applied for fast-network connection scenarios, enabling remote attackers to cause CPU denial of service by sending a flood of TCP SYN packets (as demonstrated against kernel-3.10.0 in C...

CVE-2017-5972

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service CPU consumption by sending many TCP SYN packets, as demonstrated by an attack against the...

NetGear WG111v2 Wireless Driver - Long Beacon Overflow

No description provided by source. $Id: netgearwg111beacon.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

VMware Workstation 9.x < 9.0.3 Multiple Privilege Escalation Vulnerabilities (VMSA-2013-0013 / VMSA-2013-0014)

The installed version of VMware Workstation 9.x is prior to 9.0.3. It is, therefore, affected by multiple local privilege escalation vulnerabilities : - An issue exists in the handling of shared libraries that could allow a local, malicious user to escalate privileges on Linux hosts. CVE-2013-597...

VMware Player 5.x < 5.0.3 Host Privilege Escalation (VMSA-2013-0013)

The installed version of VMware Player 5.x running on Linux is earlier than 5.0.3. It therefore reportedly contains a vulnerability in its handling of shared libraries. This issue may allow a local, malicious user to escalate privileges to root on the host. C Tenable Network Security, Inc...

NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2013-0013 Synopsis: VMware Workstation host privilege escalation vulnerability Issue date: 2013-11-14 Updated on: 2013-11-14 initial...

CVE-2013-5972

CVE-2013-5972 affects VMware Workstation on Linux (9.x prior to 9.0.3) and VMware Player on Linux (5.x prior to 5.0.3). The root cause is improper handling of shared libraries, enabling a local attacker with access to the host OS to escalate privileges on the host via unspecified vectors. The iss...