Lucene search
+L

1059 matches found

0day.today
0day.today
added 2015/08/24 12:0 a.m.19 views

Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow Version: 1.6 Date: 2015-08-23 Author: Tracy Turben email protected Software Link: http://www.efssoft.com/ Tested on: Win7x32-EN,Win7x64-EN from...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2015/08/24 12:0 a.m.16 views

Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow

Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow !/usr/bin/python Exploit Title: Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow Version: 1.6 Date: 2015-08-23 Author: Tracy Turben [email protected] Software Link: http://www.efssoft.com/ Tested on:...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2015/08/24 12:0 a.m.20 views

Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow

!/usr/bin/python Exploit Title: Easy Address Book Web Server 1.6 - USERID Remote Buffer Overflow Version: 1.6 Date: 2015-08-23 Author: Tracy Turben [email protected] Software Link: http://www.efssoft.com/ Tested on: Win7x32-EN,Win7x64-EN from struct import pack import socket,sys import os...

5.3AI score
SaveExploits0
Fedora
Fedora
added 2015/07/29 1:55 a.m.104 views

[SECURITY] Fedora 21 Update: roundcubemail-1.1.2-1.fc21

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

7.5CVSS0.2AI score0.03767EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
added 2015/03/26 12:0 a.m.32 views

Microsoft Outlook Express Windows Address Book File Overflow (MS06-016) - Ver2 (CVE-2006-0014)

Microsoft Outlook Express OE is an email, newsgroup and address book management client application. The application includes a stand-alone component called Address Book that manages the address book entries. An Address Book can contain entries for individual contacts as well as group lists that...

5.1CVSS7.1AI score0.23875EPSS
SaveExploits0
CNVD
CNVD
added 2015/03/06 12:0 a.m.7 views

Multiple Cross-Site Scripting Vulnerabilities in PHP Address Book

PHP Address Book is a simple Web-based address book , contact management application developed in PHP . PHP Address Book suffers from multiple cross-site scripting vulnerabilities that could be exploited by an attacker to execute arbitrary web script or HTML in the context of an affected site...

4.3CVSS6.4AI score0.01526EPSS
SaveExploits3References1
CNVD
CNVD
added 2015/03/05 12:0 a.m.5 views

PHP address book has multiple SQL injection and multiple cross-site scripting vulnerabilities

PHP Address Book Address Book is a PHP development of a simple Web-based address book , contact management applications , support groups , addresses , e-mail , telephone numbers and birthday information ; can be exported to vCard and CSV , integrated with Gmail, Google and Yahoo maps , the databa...

4.3CVSS7.4AI score0.02398EPSS
SaveExploits2References1
Fedora
Fedora
added 2015/02/15 3:30 a.m.88 views

[SECURITY] Fedora 20 Update: roundcubemail-1.0.5-1.fc20

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

4.3CVSS0.2AI score0.03514EPSS
SaveExploits4
NVD
NVD
added 2015/01/15 3:59 p.m.22 views

CVE-2014-9587

Multiple cross-site request forgery CSRF vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to 1 address book operations or the 2 ACL or 3 Managesieve plugins...

6.8CVSS7.2AI score0.0229EPSS
SaveExploits0References5
OSV
OSV
added 2015/01/15 3:59 p.m.5 views

DEBIAN-CVE-2014-9587

Multiple cross-site request forgery CSRF vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to 1 address book operations or the 2 ACL or 3 Managesieve plugins...

6.8CVSS9AI score0.0229EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2015/01/15 3:59 p.m.30 views

CVE-2014-9587

Multiple cross-site request forgery CSRF vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to 1 address book operations or the 2 ACL or 3 Managesieve plugins...

6.8CVSS7.2AI score0.0229EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2015/01/15 3:0 p.m.31 views

CVE-2014-9587

Multiple cross-site request forgery CSRF vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to 1 address book operations or the 2 ACL or 3 Managesieve plugins...

9.1AI score0.0229EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2015/01/15 3:0 p.m.65 views

CVE-2014-9587

Multiple cross-site request forgery CSRF vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to 1 address book operations or the 2 ACL or 3 Managesieve plugins...

6.8CVSS8.8AI score0.0229EPSS
SaveExploits0
Fedora
Fedora
added 2015/01/06 6:15 a.m.36 views

[SECURITY] Fedora 20 Update: roundcubemail-1.0.4-2.fc20

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

4.3CVSS7.5AI score0.01198EPSS
SaveExploits2
CNVD
CNVD
added 2015/01/06 12:0 a.m.5 views

PHP Address Book Cross-Site Scripting Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. A cross-site scripting vulnerability exists in PHP Address Book, which allows attackers to exploit the vulnerability to conduct cross-site scripting attacks...

6.3AI score
SaveExploits0References1
CNVD
CNVD
added 2015/01/06 12:0 a.m.8 views

PHP Address Book SQL Injection Vulnerability (CNVD-2015-00124)

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. A SQL injection vulnerability exists in PHP Address Book, which allows attackers to exploit the vulnerability to compromise an application, access or modify...

7.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/01/06 12:0 a.m.28 views

Fedora 20 : roundcubemail-1.0.4-2.fc20 (2014-17461)

This update provides Roundcube 1.0.4. This is a stable security update: the security fix is described by upstream as 'Fix possible CSRF attacks to some address book operations as well as to the ACL and Managesieve plugins.' More details on the update are available at...

4.3CVSS7.3AI score0.01198EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2015/01/06 12:0 a.m.25 views

Fedora 21 : roundcubemail-1.0.4-2.fc21 (2014-17450)

This update provides Roundcube 1.0.4. This is a stable security update: the security fix is described by upstream as 'Fix possible CSRF attacks to some address book operations as well as to the ACL and Managesieve plugins.' More details on the update are available at...

4.3CVSS7.3AI score0.01198EPSS
SaveExploits2References4
exploitpack
exploitpack
added 2015/01/04 4:54 p.m.13 views

Easy-Address-Book-Server-1.6

By setting UserID in the cookie to a long string, we can overwrite EDX which allows us to control execution flow when "call dword ptr edx+28h" is executed. EDX is overwritten with an address pointing to a location on the stack which in turn points to a NOP sled leading to the shellcode. This...

SaveExploits0
Packet Storm
Packet Storm
added 2015/01/03 12:0 a.m.46 views

PHP Address Book Cross Site Scripting / SQL Injection

Exploit Title : PHP Address Book SQL Injection and xss vulnerability Author : Manish Kishan Tanwar Home page Link : http://sourceforge.net/projects/php-addressbook/ Date : 01/01/2015 Discovered at : IndiShell Lab Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,jagriti,Kishan Singh and...

0.5AI score
SaveExploits0
Rows per page
Query Builder