CVE-2015-7728: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in user creation in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to inject arbitrary web script or HTML via the username, aka SAP Security Note 2153898...

CVE-2015-7725: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the 1 remoteSourceName in the dropCredentials function or unspecified vectors in the 2 setTraceLevelsForXsApps...

CVE-2015-7726: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allows remote authenticated users to inject arbitrary web script or HTML via the role name, aka SAP Security Note 2153898...

CVE-2015-7727: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 NewDB100REL allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the 1 trace configuration page or 2 getSqlTraceConfiguration function, aka SAP...

Alienvault Open Source SIEM (OSSIM) 4.3 - Cross-Site Request Forgery

Alienvault Open Source SIEM OSSIM 4.3 - Cross-Site Request Forgery Exploit Title: AlienVault - ossim CSRF Date: 10-5-2015 Exploit Author: MohamadReza Mohajerani Vendor Homepage: www.alienvault.com Software Link: https://www.alienvault.com/products/ossim Version: Tested on 4.3 Vulnerability Detail...

Alienvault Open Source SIEM (OSSIM) 4.3 - Cross-Site Request Forgery

Exploit Title: AlienVault - ossim CSRF Date: 10-5-2015 Exploit Author: MohamadReza Mohajerani Vendor Homepage: www.alienvault.com Software Link: https://www.alienvault.com/products/ossim Version: Tested on 4.3 Vulnerability Details: ===================== Multiple CSRF vectors exists within...

WordPress DB-Backup Plugin 4.5 /download.php 任意文件下载漏洞

No description provided by source...

PCMan FTP Server 2.0.7 - Directory Traversal

!/usr/bin/python title: PCMan FTP Server v2.0.7 Directory Traversal author: Jay Turla tested on Windows XP Service Pack 3 - English software Link: https://www.exploit-db.com/apps/9fceb6fefd0f3ca1a8c36e97b6cc925d-PCMan.7z description: PCMAN FTP 2.07 is vulnerable to Directory Traversal quick and...

ADH-Web Server IP-Cameras Multiple Improper Access Restrictions Vulnerabilities - Active Check

ADH-Web Server IP-Camera is prone to multiple access restrictions vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Belkin N600 DB Wireless Dual Band N+ Management Interface No Password Setting Vulnerability

Belkin N600 DB Wireless Dual Band N+ is a wireless dual band router product from Belkin USA. The Belkin N600 DB Wireless Dual Band N+ fails to set a default password for the web management interface, allowing an attacker to gain access to the web management interface or perform cross-site request...

Exploit Search: XPL-Search

XPL SEARCH is a script made in PHP, to perform quick searches for vulnerabilities or exploits in multiple databases Dependencies: The XPL SEARCH is written in PHP and therefore, can be used both on Linux or Windows. The following items are required for the proper functioning of the script: PHP...

IKEView R60 - Local Buffer Overflow (SEH)

!/usr/bin/python EXPLOIT TITLE: IKEView R60 Buffer overflowSEH Local Exploit AUTHOR: VIKRAMADITYA "-OPTIMUS" Credits: hyp3rlinx Date of Testing: 17th September 2015 Download Link : https://www.exploit-db.com/apps/e74a3dcf9bd8a2dd05026532fbf9bb36-IKEView.exe Tested On : Windows XP Service Pack 2...

Security researcher exposure FireEye core product 0day vulnerabilities-vulnerability warning-the black bar safety net

Recently, researchers Kristian Erik Hermansen from the FireEye core product found a 0day vulnerability will result in unauthorized file disclosure. He also provides a short trigger vulnerability of the examples and the user database file copy. In addition, he also disclosed selling three other...

Microsoft Office Products Insecure Library Loading Vulnerability

microsoft products is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Automated Evil Twin Attack: infernal-twin

Evil twin is a term for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. An evil twin is the wireless version of the phishing scam. An attacker fools wireless users into connecting a lapto...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of data...

Ashley Madison 2.0 — Hackers Leak 20GB Data Dump, Including CEO's Emails

The Impact Team – Wait, Cheaters! We haven't yet done. The group of hackers behind the breach of Ashley Madison, the popular cheater's dating service, have released a second, even much bigger 'cheat sheet' exposing sensitive materials that include sensitive corporate information. Two days ago, th...

Easy File Management Web Server 5.6 - USERID Remote Buffer Overflow Exploit

Easy File Management Web Server version 5.6 suffers from a USERID remote buffer overflow vulnerability. !/usr/bin/python Exploit Title: Easy File Management Web Server v5.6 - USERID Remote Buffer Overflow Version: 5.6 Date: 2015-08-17 Author: Tracy Turben email protected Software Link:...

CVE-2015-3082

creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37840...

Microsoft Windows Server 2003 SP2 - TCP/IP IOCTL Privilege Escalation (MS14-070)

/ Exploit Title: Windows 2k3 SP2 TCP/IP IOCTL Privilege Escalation MS14-070 Date: 2015-08-10 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows 2003 SP2 x86 Windows 2003 SP2 x86-64 Windows 2003 SP2 IA-64 Supported vulnerable software: Windows 2003 SP2 x86 Tested on: Windows 2003 SP2 x...