10742 matches found
ZeusCart 4.0 - SQL Injection
ZeusCart 4.0 - SQL Injection ZeusCart 4.0: SQL Injection Security Advisory – Curesec Research Team 1. Introduction Affected Product: ZeusCart 4.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to...
cURL / libcURL 7.x < 7.42.1 Proxied Traffic HTTP Server Header Remote Disclosure
Binary data 8864.prm...
cURL / libcURL 7.x < 7.42.0 Multiple Vulnerabilities
Binary data 8863.prm...
Amazon Linux: Security Advisory (ALAS-2013-210)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-295)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2015-551)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2015-477)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-322)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-407)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2015-514)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Elastix < 2.5 - PHP Code Injection
'; $faf=fopen"fa.txt","w+"; fwrite$faf,$inj; fclose$faf; $myf='fa.txt'; $url = $target."/vtigercrm/phprint.php?action=fa&module=ff&langcrm=../../modules/Import/ImportStep2.php%00"; // URL $reffer = "http://1337s.cc/index.php"; $agent = "Mozilla/5.0 Windows; U; Windows NT 5.0; en-US; rv:1.4...
[SECURITY] Fedora 22 Update: php-guzzle-Guzzle-3.9.3-5.fc22
Guzzle takes the pain out of sending HTTP requests and the redundancy out of creating web service clients. Guzzle is a framework that includes the tools needed to create a robust web service client, including: Service descriptions for defining the inputs and outputs of an API, resource iterators...
WordPress Theme GeoPlaces3 - Arbitrary File Upload
WordPress Theme GeoPlaces3 - Arbitrary File Upload Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility Google Dork: inurl:/wp-content/themes/GeoPlaces3/ Date: 23 August 2015 Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme Teste...
WordPress Theme GeoPlaces3 - Arbitrary File Upload
Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility Google Dork: inurl:/wp-content/themes/GeoPlaces3/ Date: 23 August 2015 Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme Tested on: Win 7 & Win 8.1 Author: MdnNewbie | Gantenger...
vBulletin x.x.x rce "0day"
Not really a 0day since it's fixed in some versions, but still an exploit that doesn't seem to be "that" public. Please note, I didn't find this. vBulletin's memcache setting is vulnerable in certain versionsall before 4.2.2 to an RCE. vBulletin seem to have refused to classify it as a...
vBulletin < 4.2.2 - Memcache Remote Code Execution
vBulletin's memcache setting is vulnerable in certain versionsall before 4.2.2 to an RCE. vBulletin seem to have refused to classify it as a vulnerability or post anything about it, or put anything in the announcements on their website. They say "PL2 4.2.2 should prevent the use of localhost,"...
Gkplugins Picasaweb - Download File
Gkplugins Picasaweb - Download File Exploit Title: Gkplugins Picasaweb Download File Date : 2015-08-13 Exploit Author : TMT VNhgroup Vendor Homepage: https://gkplugins.com/ Tested on: Windows 7 File ------------------------ $fileout = $GET'f'; -- can you download file $filelength = $GET'l';...
vBulletin Memcache Remote Code Execution
Not really a 0day since it's fixed in some versions, but still an exploit that doesn't seem to be "that" public. Please note, I didn't find this. vBulletin's memcache setting is vulnerable in certain versionsall before 4.2.2 to an RCE. vBulletin seem to have refused to classify it as a...
Scientific Linux Security Update : curl on SL6.x i386/x86_64 (20150722)
It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issu...
OracleVM 3.3 : curl (OVMSA-2015-0107)
The remote OracleVM system is missing necessary patches to address critical security updates : - require credentials to match for NTLM re-use CVE-2015-3143 - close Negotiate connections when done CVE-2015-3148 - reject CRLFs in URLs passed to proxy CVE-2014-8150 - use only full matches for hosts...