16909 matches found
CVE-2016-2314
GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote authenticated users to cause a denial of service device outage by using the FTP MKD command to create a directory with a long name, and then using certain other commands...
CVE-2016-2314
CVE-2016-2314 affects Huawei SmartAX MT882 devices running GlobespanVirata ftpd 1.0. The underlying issue allows remote authenticated users to trigger a denial of service (device outage) by creating an excessively long directory name with the FTP MKD command and then issuing additional FTP comman...
sos security and bug fix update
3.2-28.0.1.2 - Add vendor, vendor URL info for Oracle Linux orabug 17656507 [email protected] - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 [email protected] - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 [email protected] -...
Getdpd Bug Bounty #6 - (Import) Persistent Vulnerability
Document Title: =============== Getdpd Bug Bounty 6 - Import Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1718 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1718...
Getdpd Bug Bounty #6 - (Import) Persistent Vulnerability
Document Title: =============== Getdpd Bug Bounty 6 - Import Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1718 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1718...
FTPShell Client 5.24 Buffer Overflow
++++++++++++++++++++++++ + Exploit Title: FTPShell Client Add New Folder Local Buffer Overflow + Date: 2/2/2016 +Exploit Author: Arash Khazaei + Vendor Homepage: www.ftpshell.com +Software Link: http://www.ftpshell.com/download.htm + Version: 5.24 + Tested on: Windows XP Professional SP3 Version...
SUSE-SU-2016:0347-1 Security update for curl
This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer bsc962983 The following non-security bugs were fixed: -...
[slackware-security] MPlayer
New MPlayer packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/MPlayer-1.220160125-i486-1slack14.1.txz: Upgraded. This is the latest MPlayer-1.2 branch, identical to the...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-38.6.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...
FTPShell Client 5.24 - (Create NewFolder) Local Buffer Overflow
Exploit for windows platform in category local exploits ++++++++++++++++++++++++ + Exploit Title: FTPShell Client Add New Folder Local Buffer Overflow + Date: 2/2/2016 +Exploit Author: Arash Khazaei + Vendor Homepage: www.ftpshell.com +Software Link: http://www.ftpshell.com/download.htm + Version...
VK.com: Внедрение внешних сущностей в функционале импорта пользователей YouTrack
Уязвимость существует из-за возможности использования внешних сущностей XML разметки в функционале импорта пользователей YouTrack. Веб-приложение доступно по адресу youtrack.vk-cdn.net Исходя из документации https://confluence.jetbrains.com/display/YTD6/Import+Users поддерживает импорт данных...
Oracle 9i XDB FTP Pass Overflow
''' Oracle 9i XDB FTP PASS Overflow win32 Ported to python from the Metasploit oracle9ixdbftppass.rb exploit Original exploit: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/oracle9ixdbftppass.rb Description from original exploit: By passing an overly long...
XXEinjector - Tool For Automatic Exploitation Of XXE Vulnerability
XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file Mandatory - fil...
php: Security update (7 CVEs)
The php package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 5.6.8-1 = 5.6.17-1 CHANGELOG Sun, 24 Jan 2016 21:47:52 +0100 18d121b Update to 5.6.17 Fixes CVE-2016-1903. Wed, 23 Dec 2015 16:00:14 -0500 766cfcc Update to 5.6.16 Wed, ...
Knoica Minolta FTP CWD命令缓冲区溢出漏洞
No description provided by source...
V3n0M-Scanner - Popular SQLi and Pentesting Scanner
V3n0M runs on Python3 Live Project - Readding old features back in and improved for Python3 v3n0m is a free and open source scanner. Evolved from baltazar's scanner, it has adapted several new features that improve fuctionality and usability. It is mostly experimental software. This program is fo...
Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)
Konica Minolta FTP Utility 1.00 - CWD Command Overflow SEH Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow. Date : 01/08/2016 Author: TOMIWA. Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Software: Konica Minolta FTP Utility v1.0 Tested:...
Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)
Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow. Date : 01/08/2016 Author: TOMIWA. Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Software: Konica Minolta FTP Utility v1.0 Tested: Windows 7 SP1 64bits Listen for a reverse netcat connection...
Office Document Reader 5.1.13 XSS / CSRF
Hello list! Happy New Year! There are multiple vulnerabilities in Office Document Reader for iOS. There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities. Earlier I've informed developer of Office Document Reader about this and other his software. -------------------------...