7785 matches found
Microsoft Windows NT 4.0 DCOM Server Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry key...
Joomla Component Expose <= RC35 Remote File Upload Vulnerability
No description provided by source. HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHH...
HexChat 2.9.4 - Local Exploit
No description provided by source. !/usr/bin/python HexChat 2.9.4 Local Exploit Bug found by Jules Carter @iMulitia Exploit by Matt hostess Andreko mandreko at accuvant.com http://www.mattandreko.com/2013/04/buffer-overflow-in-hexchat-294.html junk1 = B30 shellcode = msfvenom -p windows/messagebo...
华天动力OA任意文件下载漏洞（两处）
简要描述： 华天动力OA任意文件下载（两处） 详细说明： 通用漏洞， 以http://demo.oa8000.com为例。 1.首先必须先访问http://demo.oa8000.com 2. 第一处 访问 http://demo.oa8000.com/OAapp/jsp/download.jsp?filename=boot.ini&filePath=C%3A%2Fboot.ini&noDecode=1 即可下载C:\boot.ini filename为目标文件名，filePath为目标文件绝对地址 第二处 这次是downloadClient.jsp...
Fedora 19 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc19 / php-5.5.13-3.fc19 / etc (2014-6904)
29 May 2014, PHP 5.5.13 CLI server : - Fixed bug 67079 Missing MIME types for XML/XSL files. Anatol COM : - Fixed bug 66431 Special Character via COM Interface CPUTF8. Anatol Core : - Fixed bug 65701 copy doesn't work when destination filename is created by tempnam. Boro Sitnikovski - Fixed bug...
Fedora 20 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc20 / php-5.5.13-3.fc20 / etc (2014-6901)
29 May 2014, PHP 5.5.13 CLI server : - Fixed bug 67079 Missing MIME types for XML/XSL files. Anatol COM : - Fixed bug 66431 Special Character via COM Interface CPUTF8. Anatol Core : - Fixed bug 65701 copy doesn't work when destination filename is created by tempnam. Boro Sitnikovski - Fixed bug...
CMS Touch 2.01 Cross Site Scripting / SQL Injection
cms touch V2.01 Sql Vulnerability ================================= Author : indoushka vendor : http://cmstouch.com ================================= Dork : powered by cmstouch نظام تاتش لإدارة المواقع الإلكترونية النسخة 2.01 http://alfarrajsite.com/cmstouch/pages.php?PageID=28 inject here...
PT-2014-3008
Name of the Vulnerable Software and Affected Versions Joomla! component com youtubegallery version 3.4.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the videofile parameter in t...
PT-2014-3005
Name of the Vulnerable Software and Affected Versions Joomla! component com multicalendar versions 4.0.2 through 4.8.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via the calid or paletteDefault parameter in an editevent action to "index.php"...
PT-2014-3007
Name of the Vulnerable Software and Affected Versions com pbbooking version 2.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating an arbitrary parameter in an edit action to...
CVE-2014-0257
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via 1 a crafted web site or 2 a crafted .NET Framework application that exposes a COM serve...
Design/Logic Flaw
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via 1 a crafted web site or 2 a crafted .NET Framework application that exposes a COM serve...
Microsoft .NET Framework Multiple Vulnerabilities (2916607)
This host is missing an important security update according to Microsoft Bulletin MS14-009. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft .NET Framework Multiple Vulnerabilities (2916607)
This host is missing an important security update according to Microsoft Bulletin MS14-009. OpenVAS Vulnerability Test $Id: secpodms14-009.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft .NET Framework Multiple Vulnerabilities 2916607 Authors: Thanga Prakash S Copyright: Copyright C 2014...
CVE-2014-0257: Improper Input Validation
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via 1 a crafted web site or 2 a crafted .NET Framework application that exposes a COM serve...
PT-2014-1668
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.0 SP3 through 4.5.1 Description The issue allows an attacker to elevate privileges on the targeted system. It exists due to improper determination of whether it is safe to execute a method, which allows remo...
PT-2014-3846
Name of the Vulnerable Software and Affected Versions Komento com komento component for Joomla! versions prior to 1.7.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the website or latitude parameter in a comment to the default URI, potentially leading t...
PT-2014-3847
Name of the Vulnerable Software and Affected Versions Joomla! component JV Comment com jvcomment versions prior to 3.0.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a comment.like action to index.php...
MW6 Technologies Datamatrix - ActiveX Data Buffer Overflow
MW6 Technologies Datamatrix - ActiveX Data Buffer Overflow !-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow PROBABLY leading to arbitrary code execution. COM Object - DE7DA0B5-7D7B-4CEA-8739-65CF600D511E...