GL-AR300M-Lite 2.2.7 Command Injection / Directory Traversal

Exploit Title: GL-AR300M-Lite Authenticated Command injection - Arbitrary file download - Directory Traversal Date: 15/1/2019 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://www.gl-inet.com/ Software Link: https://www.gl-inet.com/products/gl-ar300m/ Version: Firmware version...

GL-AR300M-Lite 2.27 - (Authenticated) Command Injection / Arbitrary File Download / Directory Traversal

Exploit Title: GL-AR300M-Lite Authenticated Command injection - Arbitrary file download - Directory Traversal Date: 15/1/2019 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://www.gl-inet.com/ Software Link: https://www.gl-inet.com/products/gl-ar300m/ Version: Firmware version...

GL-AR300M-Lite 2.27 - (Authenticated) Command Injection Arbitrary File Download Directory Traversal

GL-AR300M-Lite 2.27 - Authenticated Command Injection Arbitrary File Download Directory Traversal Exploit Title: GL-AR300M-Lite Authenticated Command injection - Arbitrary file download - Directory Traversal Date: 15/1/2019 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage:...

CVE-2013-6272

The CVE-2013-6272 issue affects Google Android 4.1.1–4.4.2, involving the NotificationBroadcastReceiver in the com.android.phone process. The underlying flaw lets a crafted app bypass access restrictions to initiate calls, dial USSD/MMI codes, or hang up calls. Reported exploitation shows potenti...

CVE-2016-6272

CVE-2016-6272 concerns Epic MyChart, where an XPath injection vulnerability exists in the help.asp topic parameter. The underlying issue allows remote attackers to access contents of an XML document containing static display strings (e.g., field labels). The vulnerability is reported as pre-authe...

EPIC MyChart - SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Epic Systems Corporation MyChart SQL Injection Google Dork: MyChart® licensed from Epic Systems Corporation Exploit Author: Shayan Sadigh http://threat.tevora.com/author/shayan/ Vendor Homepage: https://www.epic.com/software...

CVE-2016-6272

creationtimestamp| type| source ---|---|--- 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44098...

EPIC MyChart - X-Path Injection

Exploit Title: Epic Systems Corporation MyChart X-Path Injection Google Dork: MyChart® licensed from Epic Systems Corporation Date: 8/19/16 Exploit Author: Shayan Sadigh http://threat.tevora.com/author/shayan/ Vendor Homepage: https://www.epic.com/software Software Link: N/A Version: N/A Tested o...

[ASA-201709-22] nvidia: multiple issues

Arch Linux Security Advisory ASA-201709-22 ========================================== Severity: High Date : 2017-09-28 CVE-ID : CVE-2017-6266 CVE-2017-6267 CVE-2017-6272 Package : nvidia Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-418 Summary ======= The package...

NVIDIA Windows GPU Display Driver 375.x / 384.x < 385.08 Multiple Vulnerabilities

NVIDIA GPU display driver vulnerabilities may lead to denial of service or possible escalation of privileges. To exploit these vulnerabilities an attacker would send a malicious request to an affected application or interact with an affected application. If successfully exploited, these...

CVE-2017-6272

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges...

CVE-2017-6272

CVE-2017-6272 affects the NVIDIA GPU Display Driver, specifically the kernel mode layer handler. The vulnerability arises when a value provided by a user is not properly validated before being used as an index into an internal array, potentially enabling denial of service or privilege escalation....

Slackware 14.1 / current : libevent (SSA:2016-085-01)

New libevent packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-085-01. The text itself is copyright C...

CVE-2015-6272

Cisco IOS XE 2.1.0–2.2.3 and 2.3.0 on ASR 1000 devices are affected when NAT Application Layer Gateway is enabled. A crafted H.323 packet can cause the Embedded Services Processor to crash, leading to a denial of service. The issue is triggered by NAT ALG handling of H.323 messages; no explicit e...

CVE-2014-6272

Libevent’s evbuffer API contains multiple integer overflows in affected versions: 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta. An attacker providing insanely large inputs to evbuffer_add, evbuffer_expand, or bufferevent_write can trigger a heap-based buffer overflow or a...

openSUSE Security Update : libevent (openSUSE-SU-2015:0132-1)

libevent was updated to fixed heap overflows in buffer API bsc897243 CVE-2014-6272 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-68. The text description of this plugin is C SU...

Mandriva Linux Security Advisory : libevent (MDVSA-2015:017-1)

Updated libevent packages fix security vulnerability : Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In...

MGASA-2015-0009 Updated libevent packages fix CVE-2014-6272

Updated libevent packages fix security vulnerability: Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In...

[SECURITY] [DSA 3119-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...

Security Advisory - Remote Security Bypass Vulnerability on Huawei Android Devices

Android version 4.1.1 - 4.4.2 is prone to a remote security bypass vulnerability CVE-2013-6272: A vulnerability in the Android system allows an attacker to initiate or terminate arbitrary calls without the callphone permission. After investigation， we confirm that some Huawei smartphone and table...