Apache Tomcat Directory Disclosure Vulnerability (Feb 2016) - Linux

Apache Tomcat is prone to a directory disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

Cybozu Office Cross-Site Scripting Vulnerability (CNVD-2016-01252)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A cross-site scripting vulnerability in Cybozu Office versions 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cybozu Office Cross-Site Request Forgery Vulnerability

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A cross-site request forgery vulnerability exists in Cybozu Office versions 9.0.0 through 10.3.0, which allows remote attackers to exploit the vulnerability to discover CSRF tokens...

Cybozu Office Cross-Site Scripting Vulnerability

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A cross-site scripting vulnerability in Cybozu Office versions 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cybozu Office Cross-Site Scripting Vulnerability (CNVD-2016-01249)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A cross-site scripting vulnerability in Cybozu Office versions 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cybozu Office Cross-Site Scripting Vulnerability (CNVD-2016-01250)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A cross-site scripting vulnerability in Cybozu Office versions 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7798

Cross-site scripting XSS vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150...

ISC BIND 'buffer.c' Script Remote Denial of Service Vulnerability (Jan 2016)

ISC BIND is prone to a remote denial of service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

CVE-2015-4989

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

ManageEngine Desktop Central 9.0.0 FileUploadServlet File Upload

File upload vulnerability in ManageEngine Desktop Central FileUploadServlet connectionId Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Code injection

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

Cross site request forgery (csrf)

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict the addition of links, which makes it easier for remote authenticated users to conduct cross-site request...

CVE-2015-0131

Cross-site scripting XSS vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified...

ManageEngine Desktop Central 9.0.0 File Upload

File upload vulnerability in ManageEngine Desktop Central statusUpdate Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Windows Media Player 9.0.0 .wav (quartz.dll) Stack Over Flow

Exploit for windows platform in category dos / poc Title : Windows Media Player 9.0.0 .wav Memory Corruption Date: 2013-01-12 Software Link: http://windows.microsoft.com/fr-FR/windows/windows-media-player phone : +447024073406 Author: The Black Devils Tested on: Windows XP SP2 Home: www.arab47.co...

HP SNMP Agents Open Redirect and Cross-site Scripting Vulnerabilities (Linux)

The host is installed with HP SNMP Agents and is prone to open redirect and cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsnmpagentsopenredirectnxssvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ HP SNMP Agents Open Redirect and Cross-site Scripting Vulnerabilities Linux...

Cytel Studio CY3 File Processing Buffer Overflow

Added: 12/05/2011 BID: 49924 OSVDB: 75991 Background Cytel Inc. provides clinical trial design services and specialized statistical applications primarily for the biotech and pharmaceutical research markets. StatXact is a statistical software package based on the exact branch of statistics used b...

Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)

$Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IceWarp Merak Mail Server < 9.0.0 BODY Element XSS

The remote host is running IceWarp Merak Mail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host fails to properly sanitize email messages before displaying them. If a user reads a specially crafted message, a remote...

Citadel/UX - Remote Denial of Service (PoC)

/ citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 / 10.0.0 by CoKi No System Group - http://www.nosystem.com.ar / include include include include include include include include include include include define BUFFERSIZE 96+1 define ERROR -1 define...