XiongMai uc-httpd 1.0.0 Buffer Overflow

Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow Date: 2018-06-08 Exploit Author: Andrew Watson Software Version: XiongMai uc-httpd 1.0.0 Vendor Homepage: http://www.xiongmaitech.com/en/ Tested on: KKMoon DVR running XiongMai uc-httpd 1.0.0 on TCP/81 CVE ID: CVE-2018-10088 DISCLAIMER: Thi...

JVN#01161596: Safari vulnerable to script injection

Safari provided by Apple Inc. contains a script injection vulnerability CWE-81 in the processing of displaying an error page when it fails to verify server certificates. In an error page Safari displays when it fails to verify server certificates, a domain name of the website accessed is output...

Solaris 10 (sparc) : 147692-81

JavaSE 7: update 79 patch equivalent to J. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 147694-81

JavaSE 7x86: update 79 patch equivalent. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 147695-81

JavaSE 7x86: update 79 patch equivalent. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Shenzhen Haixilian's WIFICAM webcam suffers from null password vulnerability

Shenzhen Haixilian Technology Co., Ltd. is a comprehensive technology enterprise integrating R&D, production, sales and service.WIFICAM camera is one of the webcam products of the company. A null password vulnerability exists in Shenzhen Haixilian's WIFICAM webcam. Because WIFICAM webcam uses por...

amazon.de Open Redirect vulnerability

Vulnerable URL: https://www.amazon.de/gp/navigation/redirect%3Fie%3DUTF8%26url%3Dhttp://openbugbounty.org=1=en=clnk Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 81 VIP website status:| Yes Check...

Linux/x86_64 - bindshell PORT: 5600 - 81 bytes

Linux/x8664 - bindshell PORT: 5600 - 81 bytes. Shellcode exploit for linx86-64 platform / --------------------------------------------------------------------------------------------------- Linux/x8664 - bindshell PORT: 5600 - 81 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com O...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-395)

MozillaThunderbird was updated to 38.7.0 to fix the following issues : - Update to Thunderbird 38.7.0 boo969894 - MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback - MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and...

Solaris 10 (sparc) : 152077-81 (deprecated)

JavaSE 6: update 181 patch equivalent to JDK 6u181, 64bit. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152077 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 10 (x86) : 152078-81 (deprecated)

JavaSE 6x86: update 181 patch equivalent to JDK 6u181. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152078 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 152079-81 (deprecated)

JavaSE 6x86: update 181 patch equivalent to JDK 6u181, 64bit. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152079 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Solaris 10 (sparc) : 152076-81 (deprecated)

JavaSE 6: update 181 patch equivalent to JDK 6u181. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152076 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Amazon Linux: Security Advisory (ALAS-2012-81)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SmoothWall 3.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: SmoothWall 3.1 Multiple vulnerabilities Date: 21/12/2014 Author: Yann CAM @ Synetis Vendor or Software Link: www.smoothwall.org - www.smoothwall.org/download/ Version: 3.1 Category: CSRF password reset & XSS persistent Google dork: Tested on: Smoothwall Linux distribution Smoothwal...

x64 Linux bind TCP port shellcode 81 bytes, 96 with password

x64 Linux bind TCP port shellcode 81 bytes, 96 with password. Shellcode exploit for linx86-64 platform / Author: Sean Dillon Copyright: c 2014 CAaNES, LLC. http://caanes.com Release Date: December 19, 2014 Description: x64 Linux null-free TCP bind port shellcode, optional 4 byte password Assemble...

JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1493-1)

This MozillaFirefox update to version 24.0 fixes several security and non-security issues : - move greek to the translations-common package bnc840551 - update to Firefox 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720...

Amazon Linux AMI : python27 (ALAS-2012-81)

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of data than specified...

Bifrost 1.2d - Remote Buffer Overflow

!/usr/bin/python2.7 By : Mohamed Clay import socket from time import sleep from itertools import izip, cycle import base64 import threading import sys def rc4cryptdata, key: x = 0 box = range256 for i in range256: x = x + boxi + ordkeyi % lenkey % 256 boxi, boxx = boxx, boxi x = 0 y = 0 out = for...