CVE-2013-2702

CVE-2013-2702 affects the WordPress plugin Easy AdSense Lite (before 6.10). The vulnerability is a cross-site request forgery (CSRF) in the plugin’s settings that allows remote attackers to hijack authentication and perform privileged actions on behalf of arbitrary users. Exploitation details are...

CVE-2013-2702

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2702: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

Easy Icon Maker 5.01 - Crash (PoC)

Easy Icon Maker 5.01 - Crash PoC Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction :...

Easy Icon Maker 5.01 - Crash (PoC)

Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction : ----------------- Easy icon maker is sufferi...

Code injection

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

CVE-2013-1215

CVE-2013-1215 concerns Cisco ASA 5505 devices where the vpnclient tool in the Easy VPN component allows an authenticated, local attacker to escalate privileges due to a mis-handling of privilege levels (Bug CSCuf85295). Affected hardware/software is Cisco ASA with the Easy VPN feature; exploitati...

CVE-2013-1215

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

Cisco ASA Software Easy VPN Privilege Escalation Vulnerability

A vulnerability in the Easy VPN feature of Cisco ASA Software running on Cisco ASA 5505 hardware could allow an authenticated, local attacker to elevate their privileges on the device running Cisco ASA Software. The vulnerability is due to a mishandling of privilege levels, which are temporarily...

CVE-2013-1215: Undefined Security Weakness

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

Easy FTP Server远程拒绝服务漏洞

BUGTRAQ ID: 58920 Easy FTP Server是基于Windows的多用户ftp服务器，具有Web访问界面。 Easy FTP Server 1.7.0.2及其他版本的Web接口在收到内容为空的$POST请求后，会进入无限循环并消耗大量CPU资源，导致拒绝服务。 0 easyftpsvr 1.7.0.2 厂商补丁： easyftpsvr ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://code.google.com/p/easyftpsvr/ Region ; Directives...

Easy DVD Player V3.5.1 (libav) libavcodec_plugin.dll DOS

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title:Easy DVD Player libav libavcodecplugin.dll DOS Download link :http://www.easy-dvd-player.com/download.htm Author: metacom version: version V3.5.1 Category: poc Tested on: windows 7 German ''' read violation on...

Easy FTP Server 1.7.0.2 Denial Of Service

Region ; Directives created by AutoIt3WrapperGUI AutoIt3WrapperOutfile=smdcpu.exe AutoIt3WrapperUseUpx=n AutoIt3WrapperChange2CUI=y EndRegion ; Directives created by AutoIt3WrapperGUI include "WinHttp.au3" include cs easyftpsvr-1.7.0.2 CPU consumption exploit. The vulnerability is due...

Easy DVD Player 3.5.1 - libav 'libavcodec_plugin.dll' Denial of Service

!/usr/bin/python Exploit Title:Easy DVD Player libav libavcodecplugin.dll DOS Download link :http://www.easy-dvd-player.com/download.htm Author: metacom version: version V3.5.1 Category: poc Tested on: windows 7 German ''' read violation on 0x00000010 libavcodecplugin.dll 714.520: Access violatio...

Easy DVD Player 3.5.1 - libav libavcodec_plugin.dll Denial of Service

Easy DVD Player 3.5.1 - libav libavcodecplugin.dll Denial of Service !/usr/bin/python Exploit Title:Easy DVD Player libav libavcodecplugin.dll DOS Download link :http://www.easy-dvd-player.com/download.htm Author: metacom version: version V3.5.1 Category: poc Tested on: windows 7 German ''' read...

hishop和易分销系统演示站入侵

简要描述： hishop、易分销、快店通演示站被成功入侵 详细说明： 在导入淘宝数据包的同时会解压数据包。 如果在数据包（压缩文件）里面放一句话同时会解压 解压之后目录就是压缩文件夹的名字 漏洞证明： 快店通： hishop 易分销 img src="https://images.seebug.org/u...

WordPress Easy AdSense Lite Plugin <= 6.9 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that modify this plugin's settings. Solution Update the plugin...

Scientific Linux Security Update : hplip on SL6.x i386/x86_64 (20130221)

Several temporary file handling flaws were found in HPLIP. A local attacker could use these flaws to perform a symbolic link attack, overwriting arbitrary files accessible to a process using HPLIP. CVE-2013-0200, CVE-2011-2722 The hplip packages have been upgraded to upstream version 3.12.4, whic...

hpijs, hplip, libsane security update

CentOS Errata and Security Advisory CESA-2013:0500 Updated hplip packages that fix several security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common...

RedHat Update for hplip RHSA-2013:0500-02

Check for the Version of hplip OpenVAS Vulnerability Test RedHat Update for hplip RHSA-2013:0500-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...