WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting

WordPress sourceAFRICA plugin version 0.1.3 contains a cross-site scripting vulnerability. id: CVE-2015-6920 info: name: WordPress sourceAFRICA =0.1.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress sourceAFRICA plugin version 0.1.3 contains a cross-site scripting...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

Microsoft Windows 'HTTP.sys' - Remote Code Execution

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability." id: CVE-2015-1635 info: name: Microsoft...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Bonita BPM Portal <6.5.3 - Local File Inclusion

Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. dot dot in the theme parameter and a file path in the location parameter to bonita/portal/themeResource. id: CVE-2015-3897 info: name: Bonita BPM Portal 6.5.3 - Local File Inclusion author: 0xAkoko severity:...

Red Hat JBoss - Insecure Deserialization

Red Hat JBoss Application Server 4.x, 5.x, 6.x contains an insecure deserialization vulnerability in the JMXInvokerServlet and EJBInvokerServlet HTTP Invoker endpoints. These endpoints deserialize arbitrary Java objects from unauthenticated HTTP POST requests. An attacker can send a crafted Apach...

SysAid Help Desk <15.2 - Local File Inclusion

SysAid Help Desk before 15.2 contains multiple local file inclusion vulnerabilities which can allow remote attackers to read arbitrary files via .. dot dot in the fileName parameter of getGfiUpgradeFile or cause a denial of service CPU and memory consumption via .. dot dot in the fileName paramet...

Nordex NC2 - Cross-Site Scripting

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. id:...

Combodo iTop <2.2.0-2459 - Cross-Site Scripting

Combodo iTop before 2.2.0-2459 contains a cross-site scripting vulnerability in application/dashboard.class.inc.php which allows remote attackers to inject arbitrary web script or HTML via a dashboard title. id: CVE-2015-6544 info: name: Combodo iTop 2.2.0-2459 - Cross-Site Scripting author:...

WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE

The WordPress ShowBiz Pro plugin version = 1.7.1 allows arbitrary PHP file upload via the admin-ajax.php endpoint.This leads to unauthenticated remote code execution. id: CVE-2015-9499 info: name: WordPress ShowBiz Pro = 1.7.1 - Authenticated Arbitrary File Upload to RCE author:...

WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting

WordPress AB Google Map Travel plugin through 3.4 contains multiple stored cross-site scripting vulnerabilities. The plugin allows an attacker to hijack the administrator authentication for requests via the 1 lat Latitude, 2 long Longitude, 3 mapwidth, 4 mapheight, or 5 zoom Map Zoom parameters i...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

Joomla! Core SQL Injection

A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands. id: CVE-2015-7297 info: name: Joomla! Core SQL Injection author: princechaddha severity: high description: A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote...

proftpd-mod_copy-cve-2015-3306

ProFTPD 1.3.5 modcopy Sicherheitslücke CVE-2015-3306 Dieses Repository enthält den Laborbericht zur Ausnutzung eines anfälligen ProFTPD 1.3.5-Dienstes auf der Hackviser-Plattform. Das Labor demonstriert den unbefugten Zugriff auf eine vertrauliche Datei secret.txt unter Verwendung der...

CVE-2015-0235-test

CVE-2015-0235-test Playbook Ansible per verificare la vulnerabilità di CVE-2015-0235. Si basa sul programma di test fornito dalla University of Chigago link. Ansible consente di specificare un gran numero di macchine host da testare contemporaneamente. Questo non applica patch né riavvia nulla , ...

python-patrol

Python Patrol Escaneie instalações do Python no macOS e execute o script CVE-2015-20107.py para relatar se a correção é necessária Vários destes scripts precisam de permissões de Acesso Total ao Disco e devem ser executados como root para que possam escanear todo o sistema de arquivos do macOS...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC Questo è stato convertito con modifiche da un modulo metasploit come esercizio per lo studio dell'OSCP e lo sviluppo di exploit. Originariamente è nato dalla ricerca di moduli casuali di esecuzione remota di comandi con searchsploit. Ho analizzato il codice di metasploit ...

OpenSSL-1_0_1g_CVE-2015-1791

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Tutti i diritti riservati. DESCRIZIONE Il progetto OpenSSL è uno sforzo collaborativo per sviluppare un toolkit robusto, di livello commerciale, completo e open source che...

CVE-2015-2900-Exploit

CVE-2015-2898-2901, CVE-2015-6006 POC Exploit & Metasploit module Dies ist ein Proof-of-Concept-Exploit für Version 2.22.20142.166 und frühere Versionen der MEDCIN Engine medcinserv.exe oder medcinservv22.exe. Weitere Details zu den Schwachstellen finden Sie unter:...

S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM — PoC لتعطل QEMU والتحليل يحتوي هذا المستودع على إثبات مفهوم قابل لإعادة الإنتاج لتعطل/DoS رفض الخدمة للثغرة CVE-2015-3456 "VENOM" باستخدام إصدار معرض للخطر من QEMU v2.3.0. يوضح المشروع: كتابات يتحكم بها الضيف إلى وحدة تحكم القرص المرن الافتراضية FDC تشغيل مسار الكود المعرض...