1559 matches found
CVE-2015-7815
The CVE-2015-7815 entry is supported by multiple connected documents describing a Directory Traversal (Local File Inclusion) in Piwik prior to 2.15.0. The vulnerability occurs in core/ViewDataTable/Factory.php where the viewDataTable parameter is used to include local files, due to insufficient s...
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file...
Gold MP4 Player - '.swf' Local Overflow
!/usr/bin/python EXPLOIT TITLE: GOLD PLAYER Local Exploit AUTHOR: Vivek Mahajan - C3p70r Credits: Gabor Seljan Date of Testing: 30 October 2015 Download Link : http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Tested On : Windows 8.1 Pro and Windows 7 Ultimate Steps to Exploit Step ...
The vulnerability of the SolarWinds Storage Manager data management software allows a hacker to upload and execute arbitrary files.
The vulnerability of the ProcessFileUpload.jsp component in the SolarWinds Storage Manager data management software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely upload and execute arbitrary files...
FreeBSD : Joomla! -- Core - Remote File Execution/Denial of Service vulnerabilities (cec4d01a-7ac5-11e5-b35a-002590263bf5)
The JSST and the Joomla! Security Center report : 20140903 - Core - Remote File Inclusion Inadequate checking allowed the potential for remote files to be executed. 20140904 - Core - Denial of Service Inadequate checking allowed the potential for a denial of service attack. %NASLMINLEVEL 70300 C...
Zblog 2.0 /zb_install/index.php 本地文件包含漏洞
问题出现在zbinstall/index.php中 $zbloglang=&$zbp-option'ZCBLOGLANGUAGEPACK'; //首先定义zbloglang ifisset$POST'zbloglang'$zbloglang=$POST'zbloglang';//如果设置了post的 就用post传递来的做这变量了。 因为zblog防止sql注入都是通过在查询函数的时候 不采用拼接 所以他们也没对post转义 这样是注入少了 但是也造成了这里的漏洞。 $zbp-LoadLanguage'system','',$zbloglang;//跟跟跟...
Fedora 23 : ipython-3.2.1-3.fc23 (2015-16128)
Add upstream patch to fix file execution vulnerability bug 1264067 ---- Add upstream patch to fix XSS vulnerability bug 1259405 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...
Total Commander 8.52 (Windows 10) - Local Buffer Overflow
Total Commander 8.52 Windows 10 - Local Buffer Overflow !/usr/bin/python EXPLOIT TITLE: Total Commander 8.52 Buffer Overflow AUTHOR: VIKRAMADITYA "-OPTIMUS" Credits: UnN0n Date of Testing: 19th September 2015 Download Link : http://tcmd852.s3-us-west-1.amazonaws.com/tc852x32b1.exe Tested On :...
Schneider Electric StruxureWare Building Expert Security Patch
Industrial control manufacturer Schneider Electric has published new firmware for its StruxureWare Building Expert building automation system that patches a remotely exploitable vulnerability. Researcher Artyom Kurbatov discovered that the system transmits user credentials in plaintext between th...
Malicious Mail Payload Containing JavaScript Downloader
Certain malicious executable files can be hidden using js downloader file. A remote attacker could exploit this vulnerability to entice unsuspecting users to execute arbitrary files...
Design/Logic Flaw
The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object...
WordPress ThemePunch Slider Revolution plugin and Showbiz Pro plugin have multiple vulnerabilities
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.ThemePunch Slider Revolution revslider is one of the slideshow plugin.Showbiz Pro is one of the scrolling display...
Epignosis eFront has multiple vulnerabilities
Epignosis eFront is an online learning system with an Ajax interface from Epignosis USA. The system allows you to create and manage courses with tools such as a content editor, file manager, and digital library. A security vulnerability exists in Epignosis eFront. An attacker can exploit the...
CVE-2015-2995
CVE-2015-2995 affects SysAid Help Desk prior to 15.2, in the RdsLogsEntry servlet, where improper file-extension checking allows remote upload and execution of arbitrary files via a NULL byte after the extension (e.g., .war%00). Connected sources confirm a concrete exploit surface, including a Me...
Aruba Networks CPPM Directory Traversal Vulnerability (CNVD-2015-03506)
Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A directory traversal security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by a remote administrator to execute...
CVE-2015-4032
projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote attackers to rename arbitrary files, and consequently execute them, via unspecified vectors...
Multiple WordPress UpThemes Themes - Arbitrary File Upload
Exploit Title: Wordpress SimpleCart Theme File Upload and Execution Google Dork: inurl:/wp-content/themes/simplecart Date: 31 March 2015 Exploit Author: Divya Vendor Homepage: https://github.com/UpThemes/ Software Link: https://github.com/UpThemes/SimpleCart-Theme Version: 2.1.2 Tested on: Window...
UBUNTU-CVE-2015-2775
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. dot dot in a list name...
KLA10502 Multiple vulnerabilities in BACnet OPC Server
Multiple critical vulnerabilities have been found in BACnet OPC Server. Malicious users can exploit these vulnerabilities to execute arbitrary files and read&write local database. Below is a complete list of vulnerabilities 1. An unknwon vulnerabilities can be exploited remotely via unknown vecto...
