CVE-2016-7080

CVE-2016-7080 affects VMware Tools on macOS (OS X) where the graphic acceleration functions in VMware Tools 9.x and 10.x are vulnerable before version 10.0.9. The vulnerability allows local users to gain privileges or cause a denial of service via unspecified vectors, caused by a NULL pointer der...

VMSA-2016-0014 : VMware ESXi, Workstation, Fusion, & Tools updates address multiple security issues

a. VMware Workstation heap-based buffer overflow vulnerabilities via Cortado ThinPrint VMware Workstation contains vulnerabilities that may allow a windows -based virtual machine VM to trigger heap-based buffer overflows in the windows-based hypervisor running VMware workstation that the VM resid...

VMware Tools 9.x / 10.x < 10.0.9 Multiple Privilege Escalations (VMSA-2016-0014) (Mac OS X)

The version of VMware Tools installed on the remote Mac OS X host is 9.x or 10.x prior to 10.0.9. It is, therefore, affected by multiple NULL pointer dereference flaws in the graphic acceleration functions due to improper memory handling. A local attacker can exploit these to gain elevated...

VMware Fusion 8.x < 8.5.0 Multiple Privilege Escalations (VMSA-2016-0014) (Mac OS X)

The version of VMware Fusion installed on the remote Mac OS X host is 8.x prior to 8.5.0. It is, therefore, affected by multiple NULL pointer dereference flaws in the graphic acceleration functions due to improper memory handling. A local attacker can exploit these to gain elevated privileges. C...

CVE-2015-7080

CVE-2015-7080 affects Apple iOS prior to 9.2, where Siri can be abused by physically proximate attackers to bypass a client-side protection and access sensitive notification content by listening on a lock-screen device. The issue is described as a lock-screen bypass via Siri, enabling exposure of...

CVE-2014-7080

The CVE-2014-7080 entry relates to the Sigong ebook Android app (package com.sigongsa.sigonggenre) version 1.0.0, which does not verify X.509 certificates when authenticating SSL servers. The lack of certificate validation enables a man-in-the-middle attacker to spoof the server and access sensit...

Remote File Manager 1.0 - Denial of Service Exploit

No description provided by source. / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

[SECURITY] [DSA 2834-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2834-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2834-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2834-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2834-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2834-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...

CVE-2013-7080

TYPO3 vulnerability CVE-2013-7080 affects Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0–4.5.31, 4.7.0–4.7.16, and 6.0.0–6.0.11. The issue is a Mass Assignment flaw that lets remote attackers modify arbitrary fields in the configuration database via crafted links. Roo...

PineApp Mail-SeCure confnetworking.html nsserver command execution

Added: 11/25/2013 CVE: CVE-2013-6830 BID: 63817 OSVDB: 100029 Background PineApp Mail-SeCure is an e-mail security appliance which provides perimeter security protection to stop threats prior to their penetration of the customer's network, as well as post-perimeter anti-spam content inspection...

PineApp Mail-SeCure confnetworking.html nsserver command execution

Added: 11/25/2013 CVE: CVE-2013-6830 BID: 63817 OSVDB: 100029 Background PineApp Mail-SeCure is an e-mail security appliance which provides perimeter security protection to stop threats prior to their penetration of the customer's network, as well as post-perimeter anti-spam content inspection...

PineApp Mail-SeCure test_li_connection.php Command Injection

Added: 08/08/2013 BID: 61477 OSVDB: 95782 Background PineApp Mail-SeCure is an e-mail security appliance which provides perimeter security protection to stop threats prior to their penetration of the customer's network, as well as post-perimeter anti-spam content inspection. Problem PineApp...

LiteSpeed 4.1.11 Cross Site Scripting

Hey, so i decided to open this blog with with a post about a vulnerability I’ve found quite some time ago in LiteSpeed HTTP server Basically a simple reflected XSSCross Site Scripting in the administrator panel which is another instance of the HTTP server running on port 7080 If an attacker succe...

CVE-2008-7080

The CVE refers to CVE-2008-7080 in Team PHP PHP Classifieds Script, where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to obtain database credentials via a direct request to admin/backup/datadump.sql. The NVD entry lists a medium severity...

CVE-2006-7080

Summary: CVE-2006-7080 affects exV2 versions up to 2.0.4.3, where the avatar upload feature is vulnerable to a directory traversal via the old_avatar parameter. Attacker-controlled ".." sequences can be used to delete arbitrary files on the server. The vulnerability is categorized with a CVSS v2 ...

CVE-2005-1603

NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service crash via a crafted string to TCP port 7080...

CVE-2005-1603

NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service crash via a crafted string to TCP port 7080...

CVE-2005-1603

CVE-2005-1603 affects NiteEnterprises Remote File Manager 1.0. The vulnerability allows an attacker to trigger a denial-of-service (crash) by sending a crafted string to TCP port 7080. No exploit details or in-the-wild context are provided in the available documents. The sources list the impact a...