2847 matches found
AoA Audio Extractor Basic 2.3.7 - ActiveX
nse="\xEB\x06\xff\xff"; seh="\x58\xE4\x04\x10"; nops="\x90"; while nops.length10 nops+="\x90"; shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"+ "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"+...
AoA MP4 Converter ActiveX
Exploit for windows platform in category local exploits Exploit Title: AoA MP4 Converter ActiveX Date: 19.05.2014 Author:metacom Website: www.rstforums.com Software Link: www.aoamedia.com/AoAMP4Converter.exe Version: 4.1.2 Tested on: Windows xp sp3EN IE 6.0 nse="\xEB\x06\x90\x90";...
CVE-2014-0964
CVE-2014-0964 affects IBM WebSphere Application Server 6.1.0.0–6.1.0.47 and 6.0.2.0–6.0.2.43, where remote TLS traffic crafted to exploit CVE-2014-0160 can cause denial of service. The vulnerability stems from the Heartbeat handling used by OpenSSL, but the connected sources do not provide a vend...
DSA-2928-1 linux-2.6 - security update
Bulletin has no description...
Debian DSA-2921-1 : xbuffy - security update
Michael Niedermayer discovered a vulnerability in xbuffy, an utility for displaying message count in mailbox and newsgroup accounts. By sending carefully crafted messages to a mail or news account monitored by xbuffy, an attacker can trigger a stack-based buffer overflow, leading to xbuffy crash ...
Buffer overflow
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693...
Vtiger 6.0 /index.php 命令执行漏洞
No description provided by source...
海商存在通用的存储型跨站漏洞
简要描述： 存储型xss，不需要发送链接，管理员一打开收件箱就会中招 详细说明：...
Default credentials
modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters...
CVE-2014-2269
modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters...
CVE-2014-2460
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote authenticated users to affect confidentiality via vectors related to CSV Management...
CVE-2014-2748
The Security Audit Log facility in SAP Enhancement Package EHP 6 for SAP ERP 6.0 allows remote attackers to modify or delete arbitrary log classes via unspecified vectors. NOTE: some of these details are obtained from third party information...
CVE-2014-2748
Technical details about CVE-2014-2748 are not provided in the supplied documents. No concrete information on affected product versions, vulnerable component, root cause, exploit vectors, or fixes is available here. Monitor for updated advisories.
Adobe Reader 'XFDF' File Buffer Overflow Vulnerability - Mac OS X
Adobe Reader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
CVE-2012-6430
Cross-site scripting XSS vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140...
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA - 'browse.php' Local File Inclusion
CVE: CVE-2014-1222 Vendor: Vtiger Product: CRM Affected version: Vtiger 5.4.0, 6.0 RC & 6.0.0 GA Fixed version: Vtiger 6.0.0 Security patch 1 Reported by: Jerzy Kramarz Details: A local file inclusion vulnerability was discovered in the ‘kcfinder’ component of the vtiger CRM 6.0 RC. This could be...
doorGets 6.0 Cross Site Scripting
============================================================== Title ...| doorGets 6.0 Multiple vulnerabilities Version .| doorGets 6.0 Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| http://sourceforge.net ==============================================================...
ShopNc 6.0 /index.php SQL注入漏洞
No description provided by source...
CVE-2013-7316
CVE-2013-7316 : A cross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML file (noted example: README.html). The vulnerability is described across multiple sources (NVD, OpenVAS, PRION...
