FerretCMS 2.0.2-alpha - CSRF / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Title : FerretCMS 2.0.2-alpha - Exploit CSRF Vulnerability Author : ZwX Date : 24/02/2015 Download : https://codeload.github.com/JRogaishio/ferretCMS/zip/master Vendor : https://github.com/JRogaishio Level Security : Hight Tested on : Windows ...

PCMan FTP Server Information Disclosure Vulnerability

PCMan FTP Server is FTP server software. A directory traversal vulnerability exists in PCMan FTP Server version 2.0.7, which can be exploited by a remote attacker to read arbitrary files via the RETR command inside the "... /" within the RETR command, this vulnerability can be exploited to read...

Konica Minolta FTP Utility Directory Traversal Vulnerability

Konica Minolta FTP Utility is a free program from Konica Minolta Japan for receiving data sent from compatible devices. A directory traversal vulnerability exists in Konica Minolta FTP Utility version 1.0. A remote attacker could leverage the '... /' string in the RETR command to read arbitrary...

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

Buffer overflow

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

Buffer overflow

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

CVE-2015-7767

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow triggered by a long USER command, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). The vulnerability is documented as CVE-2015-7767 across multiple sources (NVD, RH, CNVD, CVE list...

CVE-2015-7768

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow via long CWD commands, enabling remote code execution. Root cause: failure to validate input length when parsing CWD, leading to an SEH overflow (as described by multiple sources). The vulnerability affects Konica Minolta FTP Utility...

Oracle: Security Advisory (ELSA-2014-1764)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

APPLE-SA-2015-09-21-1 watchOS 2

APPLE-SA-2015-09-21-1 watchOS 2 watchOS 2 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, and Apple Watch Edition Impact: Some cards may allow a terminal to retrieve limited recent transaction information when making a payment Description: Th...

Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912)

Full details: http://www.securitygalore.com/site3/safari-pasv Thanks, -Amit Klein http://www.securitygalore.com/...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/seamonkey-2.38-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information, se...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-38.3.0-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Konica Minolta FTP Utility buffer overflow

Added: 10/01/2015 Background The Konica Minolta FTP Utility is an FTP server for Windows 98 through XP. Problem A vulnerability in the FTP Utility allows remote, unauthenticated attackers to execute arbitrary commands by sending a long, specially crafted argument to any command. Resolution Remove...

Konica Minolta FTP Utility buffer overflow

Added: 10/01/2015 Background The Konica Minolta FTP Utility is an FTP server for Windows 98 through XP. Problem A vulnerability in the FTP Utility allows remote, unauthenticated attackers to execute arbitrary commands by sending a long, specially crafted argument to any command. Resolution Remove...

Konica Minolta FTP Utility buffer overflow

Added: 10/01/2015 Background The Konica Minolta FTP Utility is an FTP server for Windows 98 through XP. Problem A vulnerability in the FTP Utility allows remote, unauthenticated attackers to execute arbitrary commands by sending a long, specially crafted argument to any command. Resolution Remove...

Konica Minolta FTP Utility buffer overflow

Added: 10/01/2015 Background The Konica Minolta FTP Utility is an FTP server for Windows 98 through XP. Problem A vulnerability in the FTP Utility allows remote, unauthenticated attackers to execute arbitrary commands by sending a long, specially crafted argument to any command. Resolution Remove...