10240 matches found
PT-2011-29: Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300
Positive Research Center has discovered a vulnerability that allows one to obtain content of arbitrary files and execute arbitrary code. How to fix Update your software up to the latest version Update link Advisory status 09.09.2011 - Vendor is notified 09.09.2011 - Vendor gets vulnerability...
CVE-2011-2421
Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir media file...
PT-2011-3847
Name of the Vulnerable Software and Affected Versions Adobe Shockwave Player versions prior to 11.6.1.629 Description The issue allows attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted .dir media file. This is related to the Dirapi.dll...
CVE-2011-2421: Improper Restriction of Operations within the Bounds of a Memory Buffer
Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir media file...
DIR 100 Router WebFilter - URL Bypass Vulnerability
Document Title: =============== DIR 100 Router WebFilter - URL Bypass Vulnerability References: =========== View: http://www.youtube.com/watch?v=SCFJXJwmdRA Download: http://www.vulnerability-lab.com/resources/videos/221.wmv Release Date: ============= 2011-07-07 Vulnerability Laboratory ID VL-ID...
WebSurgery v0.5 - Web app testing tool Released
WebSurgery v0.5 - Web app testing tool Released WebSurgery is a suite of tools for security testing of web applications. Itwas designed for security auditors to help them with the web applicationplanning and exploitation. Currently, it uses an efficient, fast and stableWeb Crawler, File/Dir...
CVE-2011-2473
The dodumpdata function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opdpipe file, a different vulnerability than CVE-2011-1760...
PT-2011-3894
Name of the Vulnerable Software and Affected Versions OProfile versions 0.9.6 and earlier Description The issue allows local users to potentially gain privileges through shell metacharacters in certain arguments, including the --vmlinux, --session-dir, and --xen arguments. This is related to the...
Preemptive Protection against Adobe Shockwave Player Director File FFFFFF88 Record Parsing Remote Code Execution Vulnerabilities (APSB11-01)
A code execution vulnerability exists in Adobe Shockwave player. The vulnerability is due to an integer overflow error while calculating the size value for heap memory allocation while parsing a FFFFFF88 record. Remote attackers can exploit this vulnerability by enticing target users to open a...
EggAvatar for vBulletin 3.8.x - SQL Injection
EggAvatar for vBulletin 3.8.x - SQL Injection !/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift;...
EggAvatar for vBulletin 3.8.x - SQL Injection
!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift; my $req = HTTP::Request-newPOST =...
CVE-2011-1062: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sContext, 2 sort, 3 dir, and 4 show parameters in a save action to index.php; the 5 dir and 6 show parameters to printlist.php;...
D-LINK DIR-280 Direct Access Administrative Password Change
Hi!, i think i just found a security problem in my D-LINK DIR-280 router, if i send the form with a new admin password it change, even if you are not logged. I test this and it works, but it will be better if somebody else test it too. is just the form from the config site opened in my own browse...
Joomla! Multiple SQL Injection Vulnerabilities
The host is running Joomla! and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Multiple SQL Injection Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...
PT-2011-1467
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.21 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter order parameter in a com weblinks category action to "index.php", the filter order Dir...
PT-2011-1651
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.21 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter order or filter order Dir parameter in a com contact action to "index.php"...
D-Link DIR-300 CSRF Vuln (Change Admin Account Settings)
Exploit for hardware platform in category web applications document.exploit.submit; 0day.today 2018-01-04...
D-Link DIR-300 Cross Site Request Forgery
document.exploit.submit;...