1688 matches found
KLA10236 ACE vulnerability in Kerio Control
An SQL injection vulnerability was found in Kerio Control. By exploiting this vulnerability malicious users can execute arbitrary SQL. This vulnerability can be exploited remotely via a specially designed php call. Original advisories Release history Exploitation Public exploits exist for this...
ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC
No description provided by source. ? ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new generation, which includ...
RSA ACE Agent 5.x Image Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15206/info RSA ACE Agent is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
PMOS Help Desk 2.3 ticketview.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context...
Tube Ace(Adult PHP Tube Script) SQL Injection
No description provided by source...
Microsoft Windows nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
No description provided by source. Microsoft Windows nt!SeObjectCreateSaclAccessBits missed ACE bounds checks ---------------------------------------------------------------------------- CVE-2010-1890 An ACE is an Access Control Entry, of which many may be attached to an ACL Access Control List. ...
Winace UnAce 1.x ACE Archive Remote Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12628/info A remotely exploitable client-side directory-traversal vulnerability affects Winace unace. The application fails to properly sanitize file and directory names contained within malicious ACE format archives. An...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
No description provided by source...
KLA10990 Vulnerability in VideoLAN VLC media player
A vulnerability in the transcode module was found in VLC media player versions before 2.1.5. By exploiting this vulnerability malicious users can cause a denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a non-malicious input. Technical details This...
Cisco Unsupported ACE Module Detection
According to its version, the Cisco Application Control Engine ACE module installed on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C...
openSUSE Security Update : samba (openSUSE-SU-2014:0405-1)
"Samba was updated to fix security issues and bugs : Security issues fixed : - Password lockout was not enforced for SAMR password changes, this allowed brute-force attacks on passwords. CVE-2013-4496; bnc849224. - The DCE-RPC fragment length field is incorrectly checked, which could expose samba...
KLA10201 ACE vulnerability in IBM
An unspecified vulnerability was found in IBM products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to gcc keys. Original advisories - Exploitation Related products IBM-Notes IBM-Domino CVE list...
KLA10336 Multiple vulnerabilities in Sophos Web Appliance
Multiple critical vulnerabilities have been found in Sophos Web Appliance. Malicious users can exploit these vulnerabilities to execute arbitrary commands or change admin password. Below is a complete list of vulnerabilities 1. Vectors related to the netinterface configuration page can be exploit...
KLA10436 Multiple vulnerabilities in VMware vSphere Client
Multiple critical vulnerabilities have been found in VMware vSphere. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security. Below is a complete list of vulnerabilities 1. An improper client file update validation can be exploited remotely; 2. An improper...
KLA10129 ACE vulnerability in Core FTP
A buffer overflow was found in Core FTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server reply. Original advisories Core FTP changelog Exploitation Related products Core-FTP-client...
KLA10209 ACE vulnerability in IBM Security AppScan
The lack of an integrity check was found in IBM Security AppScan Standart. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories - Exploitation Related products...
KLA10120 Multiple vulnerabilities in Mozilla
Multiple critical vulnerabilities have been found in Mozilla products. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code, bypass security restrictions or gain privileges. Below is a complete list of vulnerabilities 1...
KLA10207 ACE vulnerability in IBM SPSS SamplePower
A buffer overflow was found in the IBM SPSS SamplePower. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ComboList. Original advisories - Exploitation Related products IBM-SPSS-SamplePower CVE list...
KLA10039 Adobe Digital Editions security advisory
An unspecified vulnerability was found in Adobe Digital Editions. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited from the network at point related to an unknown application. Original advisories Adobe...
ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC
Exploit for multiple platform in category local exploits ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new...