Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00225)

Cisco WebEx Meetings are web conferencing solutions. A user enumeration vulnerability exists in Cisco WebEx Meetings Server, which could be exploited by an attacker to obtain valid user accounts via a brute force attack...

Multiple HTML Injection Vulnerabilities in AdaptCMS

AdaptCMS is a content management system. AdaptCMS has multiple HTML injection vulnerabilities because it fails to properly filter user-supplied input. An attacker can execute supplied HTML and script code in the context of the affected site...

WordPress Plugin Cart66 Lite 'models/Cart66.php' Directory Traversal Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A directory traversal vulnerability exists in WordPress plugin Cart66 Lite 'models/Cart66.php' versions prior to 1.5.4, which...

IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2014-09212)

IBM WebSphere Portal is a framework - including runtime servers, services, tools, and many other features - that you can use to integrate your enterprise into a single, customizable interface called a portal. A cross-site scripting vulnerability in IBM WebSphere Portal versions 6.1.0 through...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09218)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

BaoFeng Storm M3U File Processing Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open this m3u file...

Vulnerability is how the number of CVE/CAN vulnerabilities early warning-the black bar safety net

In some articles and reports often referred to security vulnerability CVE-1 9 9 9-1 0 4 6 This CVE at the beginning of the vulnerability number, this article will Common Vulnerability ID representation of the method to do the following description: 1, with CVE in the beginning, such as CVE-1 9 9...

Anymacro Mail System G4X email server web interface directory traversal vulnerability

Overview Anymacro Mail System G4X email server web interface contains a directory traversal vulnerability. Description According to Anymacro's website: Anymacro Mail System is a professional e-mail and unified messaging product solution. Anymacro Mail System can be used for an e-mail platform for...

Sunway Force Control

Overview ICS-CERT has received a report from Security researcher Dillon Beresford of NSS Labs concerning vulnerabililities affecting Sunway ForceControl and pNetPower SCADA/HMI applications. The reported vulnerabilities are heap-based buffer overflows that could result in a denial of service or t...

BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability

BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability Vulnerable: Storm2012 3.10.4.21 Storm2012 3.10.4.16 Storm2012 3.10.4.8 Storm2012 3.10.3.17 Storm2012 3.10.2.5 Storm2012 3.10.1.12 Other versions also may be affected Vendor: www.baofeng.com 1 Software Description: BaoFeng Storm is ve...

BaoFeng Storm M3U File Processing Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= BaoFeng Storm M3U File Processing Buffer Overflow Exploit ========================================================= !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffe...

BaoFeng Storm - .m3u File Processing Buffer Overflow

BaoFeng Storm - .m3u File Processing Buffer Overflow !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open th...

BaoFeng Storm - '.m3u' File Processing Buffer Overflow

!/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffer Overflow Exploit CNVD-ID: CNVD-2010-00752 Author: Lufeng Li and Qingshan Li of Neusoft Corporation Download: www.baofeng.com Test: Put m3u file in roote.g. c:/ d:/,and open this m3u file Platform: Windows XPSP3 Chinese Simplifie...

MS Windows Message Queuing BoF Universal Exploit (MS05-017) (v.0.3)

漏洞描述：Microsoft消息队列技术允许不同时间运行的应用程序可以跨不同网络或跨临时离线的系统进行通讯。Microsoft消息队列的实现上存在远程代码执行漏洞，远程攻击者可能利用此漏洞控制系统。 漏洞起因是消息队列组件中未经检查的缓冲区。成功利用这个漏洞的攻击者可以完全控制受影响的系统，然后攻击者就可以安装程序，浏览，更改或删除数据，或创建拥有完全权限的新帐号。漏洞影响：Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...

MS Exchange Server Remote Code Execution Exploit (MS05-021)

漏洞描述：Microsoft Exchange是一款由微软开发的邮件服务程序。Microsoft Exchange Server中存在缓冲区溢出漏洞，攻击者可能利用此漏洞在主机上执行任意指令。 起因是Exchange SMTP Server在处理特殊的扩展SMTP verb时存在缓冲区溢出。漏洞可能允许攻击者连接到Exchange服务器的SMTP端口并发送精心构造的恶意命令，这些命令可能导致拒绝服务或以SMTP服务进程的权限运行攻击者所选择的代码。漏洞影响：受影响的软件： •Microsoft Exchange Server 2000 Service Pack 3 •Microsoft...