495 matches found
CVE-2018-19861
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued...
CVE-2018-19862
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontinued...
CVE-2018-19862
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontinued...
CVE-2018-19861
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued...
Buffer overflow
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued...
CVE-2018-19861
Affected software. MiniShare 1.4.1 and earlier. Vulnerability. A stack-based or general buffer overflow in MiniShare’s HTTP handling leads to remote arbitrary code execution. For CVE-2018-19861 the overflow occurs via a long HTTP HEAD request; CVE-2019-17601 via an HTTP CONNECT request; CVE-2020-...
CVE-2018-19861
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request. NOTE: this product is discontinued...
CVE-2018-19862
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request. NOTE: this product is discontinued...
CVE-2018-19862
CVE-2018-19862 affects MiniShare 1.4.1 and earlier. The vulnerability is a buffer overflow triggered by a long HTTP POST request, enabling remote attackers to execute arbitrary code. The product is noted as discontinued. Connected sources also reference related issues (e.g., CVE-2019-17601, CVE-2...
CouchDB: Multiple vulnerabilities
Background Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database. Description Multiple vulnerabilities have been discovered in CouchDB. Please review the CVE identifiers referenced below for details. Impact A remote attacker could execute arbitrary code or...
Tarantella Enterprise Security Bypass Vulnerability
Exploit for cgi platform in category web applications &ms=unique Where the parameter un is the username you know. You recive the message: "The content of this file must be language independent! This applet immediately loads a new document in a named frame here WebtopFrame, which will be so...
Tarantella Enterprise Directory Traversal Vulnerability
Exploit for cgi platform in category web applications !-- Exploit Title: Directory Traversal in Tarantella Enterprise before 3.11 Exploit Author: Rafael Pedrero Vendor Homepage: Homepage: http://www.sun.com/ & http://www.oracle.com/ Software Link: the product is discontinued vulnerability found i...
Tarantella Enterprise Security Bypass
Vulnerability found in 2009. &ms=unique Where the parameter un is the username you know. You recive the message: "The content of this file must be language independent! This applet immediately loads a new document in a nam...
Tarantella Enterprise Directory Traversal
Vulnerability found in 2009. !-- Exploit Title: Directory Traversal in Tarantella Enterprise before 3.11 Date: 30-11-2018 Exploit Author: Rafael Pedrero Vendor Homepage: Homepage: http://www.sun.com/ & http://www.oracle.com/ Software Link: the product is discontinued vulnerability found in 2009...
CVE-2018-18619
internal/advancedcommentsystem/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter...
CVE-2018-18619
CVE-2018-18619 : The vulnerability affects the web app Advanced Comment System 1.0 , in the file internal/advanced_comment_system/admin.php . It is prone to an SQL injection because user-supplied data is not sufficiently sanitized before use in an SQL query, enabling remote attackers to trigger t...
CVE-2018-18619
internal/advancedcommentsystem/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter...
Advanced Comment System 1.0 - SQL Injection
Exploit Title: SQL injection in Advanced comment system v1.0 Date: 29-10-2018 Exploit Author: Rafael Pedrero Vendor Homepage: http://www.plohni.com Software Link: http://www.plohni.com/wb/content/php/download/Advancedcommentsystem1-0.zip,...