61 matches found
Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (1)
Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery 1 Exploit Title : Multiple CSRF Horde Groupware Web mail Edition Author:Marcela Benetrix Date: 10/25/13 version: 5.1.2 software link:http://www.horde.org/apps/webmail GroupWare Web mail Edition Horde Groupware Webmail Edition is ...
Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (1)
Exploit Title : Multiple CSRF Horde Groupware Web mail Edition Author:Marcela Benetrix Date: 10/25/13 version: 5.1.2 software link:http://www.horde.org/apps/webmail GroupWare Web mail Edition Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can...
Horde Groupware Web Mail 5.1.2 Cross Site Request Forgery
Exploit Title : Multiple CSRF Horde Groupware Web mail Edition Author:Marcela Benetrix Date: 10/25/13 version: 5.1.2 software link:http://www.horde.org/apps/webmail GroupWare Web mail Edition Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can...
BigAnt Server SCH Request Stack Buffer Overflow (CVE-2012-6275)
A stack buffer overflow vulnerability exists in BigAnt Server. The vulnerability is due to a boundary error when handling SCH and DUPF requests. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server. Successful exploitation would result...
CVE-2012-6275
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via 1 the filename header in an SCH request or 2 the userid component in a DUPF request...
CVE-2012-6275
Summary: CVE-2012-6275 affects BigAntSoft BigAnt IM Message Server’s AntDS.exe, where a stack-based buffer overflow is triggered by handling the filename header in SCH requests or the userid field in DUPF requests. This can allow remote, unauthenticated attackers to influence the process, potenti...
BigAnt Server SCH and DUPF Stack Overflow
Added: 02/22/2013 CVE: CVE-2012-6275 BID: 57214 OSVDB: 89344 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt Server versions 2.97 SP7 and prior are vulnerable to a stack overflow condition due to improp...
BigAnt Server SCH and DUPF Stack Overflow
Added: 02/22/2013 CVE: CVE-2012-6275 BID: 57214 OSVDB: 89344 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt Server versions 2.97 SP7 and prior are vulnerable to a stack overflow condition due to improp...
BigAnt Server 2 SCH And DUPF Buffer Overflow Vulnerability
This Metasploit module exploits a stack buffer overflow in BigAnt Server 2.97 SP7. The vulnerability is due to the dangerous usage of strcpy while handling errors. This module uses a combination of SCH and DUPF request to trigger the vulnerability, and has been tested successfully against version...
BigAnt Server 2 SCH And DUPF Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'BigAnt Server 2 SCH And DUPF Buffer...
CVE-2012-6275
creationtimestamp| type| source ---|---|--- 2013-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24527 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigantserverschdupfbof.rb 2025-02-06 03:13:41+00:00...
BigAnt Server 2.97 - SCH / DUPF Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'BigAnt Server 2 SCH And DUPF Buffer...
BigAnt Server 2 SCH And DUPF Buffer Overflow
This exploits a stack buffer overflow in BigAnt Server 2.97 SP7. The vulnerability is due to the dangerous usage of strcpy while handling errors. This module uses a combination of SCH and DUPF request to trigger the vulnerability, and has been tested successfully against version 2.97 SP7 over...
BigAnt IM Message server and components contain multiple vulnerabilities
Overview BigAnt IM Message server and components contain multiple vulnerabilities which could allow an attacker to perform administrative functions on the the system Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2012-6273During the SH...
CVE-2008-6275
Cross-site scripting XSS vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages...
CVE-2008-6275
The CVE-2008-6275 entry describes a cross-site scripting (XSS) vulnerability in the Drupal User Karma module (versions 5.x prior to 5.x-1.13 and 6.x prior to 6.x-1.0-beta1). The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified messages. The available documents c...
CVE-2007-6275
CVE-2007-6275 affects bcoos 1.0.10 and earlier. The vulnerability is a SQL injection in modules/adresses/ratefile.php that allows remote attackers to execute arbitrary SQL commands via the lid parameter, representing a vector different from CVE-2007-6266. The connected records confirm the affecte...
CVE-2006-6275
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service panic via unspecified vectors, possibly related to the exitlwps function and SIGKILL and /proc PCAGENT signals...
CVE-2006-6275
CVE-2006-6275 documents a race condition in the Solaris kernel (versions 8–10) that allows local users to trigger a denial of service (panic) via unspecified attack vectors. The description hints at involvement of the exitlwps function and SIGKILL and /proc PCAGENT signals, but does not provide c...
