Oracle Java SE 6.x, 7.x, 8.x Multiple Vulnerabilities (cpuapr2014) - Linux

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Java SE 7.x, 8.x Multiple Vulnerabilities (cpuapr2014) - Linux

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

UBUNTU-CVE-2014-2434

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to DML...

Microsoft Office Excel Scenario Record Buffer Overflow (MS11-045) - Ver2 (CVE-2011-1275)

Microsoft Excel is a popular spreadsheet application. This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute...

SAP ERP Enhancement Packages安全审核日志数据操作漏洞

Bugtraq ID:66683 SAP ERP Enhancement Packages是一个SAP ERP增强包。 SAP ERP Enhancement Packages相关安全审核日志存在未明错误，允许恶意用户编辑或删除日志数据。 0 SAP ERP Enhancement Packages EHP 6.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： https://service.sap.com/sap/support/notes/1926485...

Internet Explorer Selection Object Memory Corruption (MS11-050) - Ver2 (CVE-2011-1261)

This is a remote code execution vulnerability. When Internet Explorer attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the logged-on user. Successful exploitation of...

Monoprice.com Cart Enumeration

As similarly stated at http://nmap.org/mailman/listinfo/fulldisclosure I would appreciate if Monoprice.com better secures its ecommerce site by fixing the following flaw rather than hiding it. With no cookies, visiting http://www.monoprice.com/Cart yields an empty cart with no cart id . Adding an...

Apache Tomcat Multiple Vulnerabilities - 01 (Mar 2014)

Apache Tomcat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat"; ifdescription...

Apache Tomcat Session Fixation Vulnerability (Mar 2014)

Apache Tomcat is prone to a session fixation vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Important: 389-ds-base

Issue Overview: It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager...

lighttpd < 1.4.35 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.35. It is, therefore, affected by the following vulnerabilities : - A SQL injection flaw exists in the 'modmysqlvhost' module where user input passed using the hostname is not properly sanitized. A remote...

ownCloud 'lib/bookmarks.php' SQL Injection Vulnerability

ownCloud is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...

D-LINK DIR-615 Cross Site Request Forgery

Exploit Title: Dlink DIR-615 Hardware Version E4 Firmware Verion 5.10 CSRF Vulnerability Google Dork: N/A Date: 19/02/2014 Exploit Author: Dhruv Shah Vendor Homepage: http://www.dlink.com/us/en/home-solutions/connect/routers/dir-615-wireless-n-300-router Software Link: N/A Hardware Version:E4...

Trendchip HG520 ADSL2+ Wireless Modem CSRF Vulnerability

Exploit for hardware platform in category web applications Cross Site Request Forgery This Modem's Web Application , suffers from Cross-site request forgery through which attacker can manipulate user data via sending him malicious craft url. The Modems's Application not using any security token t...

Trendchip HG520 ADSL2+ Wireless Modem - Cross-Site Request Forgery

Trendchip HG520 ADSL2+ Wireless Modem - Cross-Site Request Forgery Exploit Title: Trendchip HG520 ADSL2+ Wireless Modem CSRF Vulnerability Google Dork: N/A Date: 15/02/2014 Exploit Author: Dhruv Shah Vendor Homepage: N/A Software Link : N/A Version: Firmware Version:2.11.38.0RE0.C2B3.9.9.5 Tested...

Microsoft Graphics Component Memory Corruption (MS14-007; CVE-2014-0263)

A remote code execution vulnerability has been reported in Windows Graphics Component. The vulnerability is due to the way Windows components handle specially crafted GIF files. A remote attacker can exploit this issue by enticing a user to view GIF files in shared content. Successful exploitatio...

ECSHOP background low-privileged sql injection-vulnerability warning-the black bar safety net

Brief description: ECSHOP background low permissionssql injectionone Detailed description: General Delivery clerk in the landing after just need a list of orders of permission, which is a low administrator can be injected to give the super pipe permissions As with file permissions, you can also...

Secunia Research: OpenPNE PHP Object Injection Vulnerability

====================================================================== Secunia Research 20/01/2014 OpenPNE PHP Object Injection Vulnerability ====================================================================== Table of Contents Affected...

PT-2013-6299 · Esri · Esri Arcgis For Server

Name of the Vulnerable Software and Affected Versions: ESRI ArcGIS for Server versions through 10.2 Description: The issue allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service. This can be exploited by providing malicious input to the...

PHPSHE电商程序SQL注入4

简要描述： PHPSHE电商程序SQL注入漏洞4 详细说明： 在删除购物车商品时，参数未过滤直接带入sql语句执行，导致SQL注入。 在/module/index/order.php文件： //@ 购物车商品删除 @// case 'cartdel': $money'orderproductmoney' = $money'orderwlmoney' = $money'ordermoney' = 0; if pelogin'user' $result = $db-pedelete'cart', array'userid'=$suserid,...