7000 matches found
Security Update Available for Adobe Shockwave Player
Adobe has released a security update for Adobe Shockwave Player 12.0.3.133 and earlier versions for Windows and Macintosh to address multiple vulnerabilities. These vulnerabilities, if exploited, could allow an attacker to run malicious code on an affected system. US-CERT recommends that users an...
CVE-2013-3143
creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187 2016-12-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40923...
Amazon Linux AMI : php (ALAS-2012-77)
A flaw was found in the way the php-cgi executable processed command line arguments when running in CGI mode. A remote attacker could send a specially crafted request to a PHP script that would result in the query string being parsed by php-cgi as command line options and arguments. This could le...
CVE-2013-3597
creationtimestamp| type| source ---|---|--- 2013-08-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38739...
CVE-2013-1662
creationtimestamp| type| source ---|---|--- 2013-08-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40169 2013-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27938 2018-05-29 15:50:33+00:00| seen|...
CVE-2013-4888
creationtimestamp| type| source ---|---|--- 2013-08-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38745...
CVE-2013-4900
creationtimestamp| type| source ---|---|--- 2013-08-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38737...
CVE-2013-4889
creationtimestamp| type| source ---|---|--- 2013-08-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38746...
PayPal Account System - Auth Bypass Session Issue
Document Title: =============== PayPal Account System - Auth Bypass Session Issue References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1057 View: http://www.youtube.com/watch?v=tk9aMBpayS8 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1056 Release Date:...
Adobe ColdFusion Authentication Bypass Vulnerability (APSA13-01)
Adobe ColdFusion is prone to a remote authentication bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft .NET Framework Array Access Violation (MS13-052; CVE-2013-3131; CVE-2013-3134)
A remote code execution vulnerability exists in the way the .NET Framework handles multidimensional arrays of small structures. The vulnerability is caused when the .NET Framework improperly handles multidimensional arrays of small structures. An attacker who successfully exploited this...
D-Link Devices Unauthenticated Remote Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link Devices Unauthenticated Remote...
Adobe Reader ToolButton Use After Free
This module exploits a use after free condition on Adobe Reader versions 11.0.2, 10.1.6 and 9.5.4 and prior. The vulnerability exists while handling the ToolButton object, where the cEnable callback can be used to early free the object memory. Later use of the object allows triggering the use aft...
CVE-2013-5028
creationtimestamp| type| source ---|---|--- 2013-08-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38691...
CVE-2013-4885
creationtimestamp| type| source ---|---|--- 2013-08-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38741...
CVE-2013-2653
creationtimestamp| type| source ---|---|--- 2013-08-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38689...
CVE-2013-4200
creationtimestamp| type| source ---|---|--- 2013-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38738...
CVE-2013-4624
creationtimestamp| type| source ---|---|--- 2013-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38683 2013-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38682...
TRENDnet TEW-812DRU CSRF/Command Injection Root Exploit
Exploit for hardware platform in category web applications TRENDnet TEW-812DRU CSRF - Command Injection Shell Exploit. Please wait... //Request to enable port forwarding to the routers internal IP on port 23 //This exploit works without this request, but the exploit was more stable with it, so it...