2698 matches found
KLA10581 Privilege escalation vulnerability in Microsoft Silverlight
An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed Silverlight application. Original advisories Microsoft advisory CVE-2015-1715 Exploitation...
D-Link cloud routing memory vulnerability: hack 1 minute break or leakage of online banking passwords-vulnerability warning-the black bar safety net
D-Link cloud routing memory the vulnerability may leak password Relates to 1 of 7 models; the Friends of the news group in English official website released four of the model number Router the patch, but there is no Chinese version of the Beijing news news recently, the domestic security experts...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Admin Control Panel ACP login in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2334
Cross-site request forgery CSRF vulnerability in the Admin Control Panel ACP login in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2334
Cross-site request forgery CSRF vulnerability in the Admin Control Panel ACP login in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
PT-2015-5721
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4 Description A cross-site request forgery CSRF issue exists in the Admin Control Panel ACP login, allowing remote attackers to hijack the authentication of victims. Recommendations For versions prior to 1.8.4, updat...
CVE-2015-2334: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Admin Control Panel ACP login in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Details Surface on Stuxnet Patch Bypass
It took 10 hours to find what had eluded others for close to five years. German computer science student Michael Heerklotz spent the Christmas holiday reading Countdown to Zero Day, a narrative on the discovery and impact of Stuxnet, the computer worm considered one of the first cyberweapons, and...
LG DVR LE6016D - Unauthenticated Remote Users/Passwords Disclosure Exploit
Exploit for hardware platform in category web applications !/usr/bin/perl LG DVR LE6016D unauthenticated remote users/passwords disclosure exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Digital video recorder DVR surveillance is the use of cameras, often hidden or concealed,...
LG DVR LE6016D Credential Disclosure
!/usr/bin/perl LG DVR LE6016D unauthenticated remote users/passwords disclosure exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Digital video recorder DVR surveillance is the use of cameras, often hidden or concealed, that use DVR technology to record video for playback or...
MyBB 1.8.1 /admin/modules/config/language.php 跨站脚本漏洞
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register This poc requires a valid credentialcookie to the ACPAdmin Control Panel to work. class TestPOCPOCBase: vulID =...
Realtek-HD-Audio-Control-Panel-2.1.3.2
App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite filepath = "C:\ShellCode\RTHDCPL 2.1.3.2 - Exploit.bin" f = openfilepath, "wb" f.write'A'4...
ealtek-Audio-Control-Panel-1.0.1.65
App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite filepath = "C:\ShellCode\RTLCPL 1.1.1.6 - Exploit.bin" f = openfilepath, "wb" f.write'BraniX'...
CVE-2014-9438
Cross-site request forgery CSRF vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authentication of administrators for requests that 1 ban a user via the username parameter in a dobanuser action to modcp/banning.php or 2 unban a user, 3 modify...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authentication of administrators for requests that 1 ban a user via the username parameter in a dobanuser action to modcp/banning.php or 2 unban a user, 3 modify...
CVE-2014-9438
Cross-site request forgery CSRF vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authentication of administrators for requests that 1 ban a user via the username parameter in a dobanuser action to modcp/banning.php or 2 unban a user, 3 modify...
CVE-2014-9438
CVE-2014-9438 is a CSRF vulnerability in the vBulletin 4.2.2 Moderator Control Panel. The issue allows an attacker to hijack an administrator’s session to perform actions such as banning/unbanning users, modifying user profiles, and approving or editing posts/topics via the modcp interface (e.g.,...
PT-2015-4201
Name of the Vulnerable Software and Affected Versions vBulletin version 4.2.2 Description A cross-site request forgery CSRF issue exists in the Moderator Control Panel, allowing remote attackers to hijack administrator authentication for various actions, including banning or unbanning a user via...
CVE-2014-9438: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authentication of administrators for requests that 1 ban a user via the username parameter in a dobanuser action to modcp/banning.php or 2 unban a user, 3 modify...