61 matches found
Microsoft Windows Explorer Preview Pane Security Bypass Vulnerability
Previewing a WMA/WMV media format on Windows Explorer through its Preview Pane causes embedded URLs to be automatically opened in the default browser without displaying any prompt. Exploit Title: Windows Explorer Preview Pane WMV/WMA media Automatic URI Opening Vulnerability Exploit Author: Eduar...
Exploit for CVE-2021-1675
C and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527...
JustArchiNET ArchiSteamFarm 输入验证错误漏洞
ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. An input validation error vulnerability exists in JustArchiNET ArchiSteamFarm. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor...
PT-2021-13890 · Mongodb · Mongodb C Driver
Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions 2.12.0 through 2.12.1 Description: The MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain...
Mongodb Server 信息泄露漏洞
MongoDB is a document-oriented database management system from the American company MongoDB. An information disclosure vulnerability exists in MongoDB C Driver versions 2.12 through 2.12.1. The vulnerability stems from the fact that events published by the program may contain security-sensitive...
Exploit for Out-of-bounds Write in Php
It is an exploit module/toolkit targeting a remote code execution vulnerability. The target product/service or framework is php-fpm and Nginx. The vulnerability class/vector is remote code execution RCE. The probable entry point is not specified. Notable dependencies/tooling include Python and...
HTTP Asynchronous Reverse Shell - Asynchronous Reverse Shell Using The HTTP Protocol
Today there are many ways to create a reverse shell in order to be able to remotely control a machine through a firewall. Indeed, outgoing connections are not always filtered. However security software and hardware IPS, IDS, Proxy, AV, EDR... are more and more powerful and can detect these attack...
Unspecified Vulnerability in Bouncy Castle BC
Bouncy Castle BC is a cryptographic library for C and Java applications. A security vulnerability exists in Bouncy Castle BC versions 1.54 through 1.59, BC-FJA version 1.0.0, and BC-FJA 1.0.1 and earlier. No detailed vulnerability details are provided at this time...
CVE-2018-8119
A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the AMQP protocol, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK, C SDK, Java SDK...
Mozilla Maintenance Service Log File Overwrite Elevation of Privilege
Source: https://code.google.com/p/google-security-research/issues/detail?id=427&can=1 Mozilla Maintenance Service: Log File Overwrite Elevation of Privilege Platform: Windows Version: Mozilla Firefox 38.0.5 Class: Elevation of Privilege Summary: The maintenance service creates a log file in a use...
DEBIAN-CVE-2013-1624
The TLS implementation in the Bouncy Castle Java library before 1.48 and C library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attack...
Fedora Update for gtksourceview-sharp FEDORA-2010-10332
Check for the Version of gtksourceview-sharp OpenVAS Vulnerability Test Fedora Update for gtksourceview-sharp FEDORA-2010-10332 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...
[SECURITY] Fedora 13 Update: gtksourceview-sharp-2.0.12-11.fc13
gtksourceview-sharp is a C sharp binder for gtksourceview...
[SECURITY] Fedora 11 Update: monodevelop-2.0-9.fc11
This package provides MonoDevelop, a full-featured IDE for Mono with syntax colouring, code completion, debugging, project management and support for C sharp, Visual Basic.NET, Java, Boo, Nemerle and MSIL...
[SECURITY] Fedora 11 Update: monodevelop-2.0-8.fc11
This package provides MonoDevelop, a full-featured IDE for Mono with syntax colouring, code completion, debugging, project management and support for C sharp, Visual Basic.NET, Java, Boo, Nemerle and MSIL...
[SECURITY] Fedora 11 Update: monodevelop-2.0-6.fc11
This package provides MonoDevelop, a full-featured IDE for Mono with syntax colouring, code completion, debugging, project management and support for C sharp, Visual Basic.NET, Java, Boo, Nemerle and MSIL...
[SECURITY] Fedora 11 Update: monodevelop-2.0-5.fc11
This package provides MonoDevelop, a full-featured IDE for Mono with syntax colouring, code completion, debugging, project management and support for C sharp, Visual Basic.NET, Java, Boo, Nemerle and MSIL...
WordPress Core 2.2 - 'xmlrpc.php' SQL Injection
/ El error, bastante tonto por cierto, se encuentra en la función wpsuggestCategories, en el archivo xmlrpc.php: function wpsuggestCategories$args global $wpdb; $this-escape$args; $blogid = int $args0; $username = $args1; $password = $args2; $category = $args3; $maxresults = $args4;...
