3002 matches found
Hirschmann "Classic Platform" switches reveal administrator password in SNMP community string by default
Overview Hirschmann "Classic Platform" switches contain a password sync feature that syncs the switch administrator password with the SNMP community password, exposing the administrator password to attackers on the local network. Description CWE-257: Storing Passwords in a Recoverable Format For...
Classic Infomedia Authentication Bypass
Document Title: =============== Classic Infomedia Login - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1679 Release Date: ============= 2016-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 16...
WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability
Document Title: =============== WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1681 Release Date: ============= 2016-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 167...
CVE-2016-0935
Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a crafted ExtGState dictionary...
CVE-2016-0944
Technical details for CVE-2016-0944 are not provided in the connected documents. The initial entry mentions affected Adobe products and memory corruption/remote code risk but lacks root cause, affected versions, or available fixes. Monitor for updates.
CVE-2016-0933
Technical details for CVE-2016-0933 are not publicly available in the provided documents. Monitor for updates from trusted sources; connected documents do not specify affected products, versions, or exploits.
KeePass Password Safe Classic 1.29 - Crash (PoC)
KeePass Password Safe Classic 1.29 - Crash PoC Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept Affected Versions: All Version Founder : keepass.info Tested on Windows 7 / Server 2008 Download Link :...
netfaqs.com XSS vulnerability
Vulnerable URL: http://www.netfaqs.com/macintosh/connect/Classic/FreePPP/252/index.asp?bisp=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
These Top 10 Programming Languages Have Most Vulnerable Apps on the Internet
A new research showed that Scripting languages, in general, give birth to more security vulnerabilities in web applications, which raised concerns over potential security bugs in millions of websites. The app security firm Veracode has released its State of Software Security: Focus on Application...
Design/Logic Flaw
The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information...
Coppermine Photo Gallery Cross-Site Scripting Vulnerability
Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...
Classic FTP 2.36 - CWD Reconnection Denial of Service Vulnerability
Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Classic FTP v2.36 CWD Reconnection DOS Date: 27/07/2015 Exploit Author: St0rn Vendor Homepage: www.nchsoftware.com Software Link: www.nchsoftware.com/classic/cftpsetup.exe Version: 2.36 Tested on: Windows 7...
Classic FTP 2.36 - CWD Reconnection Denial of Service
Classic FTP 2.36 - CWD Reconnection Denial of Service !/usr/bin/env python Exploit Title: Classic FTP v2.36 CWD Reconnection DOS Date: 27/07/2015 Exploit Author: St0rn Vendor Homepage: www.nchsoftware.com Software Link: www.nchsoftware.com/classic/cftpsetup.exe Version: 2.36 Tested on: Windows 7...
Classic FTP 2.36 - CWD Reconnection Denial of Service
!/usr/bin/env python Exploit Title: Classic FTP v2.36 CWD Reconnection DOS Date: 27/07/2015 Exploit Author: St0rn Vendor Homepage: www.nchsoftware.com Software Link: www.nchsoftware.com/classic/cftpsetup.exe Version: 2.36 Tested on: Windows 7 import socket import sys import time junk1="250...
CVE-2015-5106
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and perform a transition...
Design/Logic Flaw
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified...
Memory corruption
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory...
Rockwell Automation RSLinx Classic Detection
Binary data scadaapprslinxclassicdetect.nbin...