374 matches found
Orangescrum 1.6.1 File Upload / Cross Site Scripting
Exploit Title: Orangescrum 1.6.1 Multiple Vulnerabilities Google Dork: NA Date: July 9 2017 Exploit Author: [email protected] Author blog : cupuzone.wordpress.com Vendor Homepage: https://www.orangescrum.org/ Software Link: https://www.orangescrum.org/free-download Version: 1.6.1 Tested on:...
Orangescrum 1.6.1 - Multiple Vulnerabilities
Orangescrum 1.6.1 - Multiple Vulnerabilities Exploit Title: Orangescrum 1.6.1 Multiple Vulnerabilities Google Dork: NA Date: July 9 2017 Exploit Author: [email protected] Author blog : cupuzone.wordpress.com Vendor Homepage: https://www.orangescrum.org/ Software Link:...
Orangescrum 1.6.1 - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Orangescrum 1.6.1 Multiple Vulnerabilities Google Dork: NA Date: July 9 2017 Exploit Author: tomplixsee Author blog : cupuzone.wordpress.com Vendor Homepage: https://www.orangescrum.org/ Software Link:...
Orangescrum 1.6.1 - Multiple Vulnerabilities
Exploit Title: Orangescrum 1.6.1 Multiple Vulnerabilities Google Dork: NA Date: July 9 2017 Exploit Author: [email protected] Author blog : cupuzone.wordpress.com Vendor Homepage: https://www.orangescrum.org/ Software Link: https://www.orangescrum.org/free-download Version: 1.6.1 Tested on:...
Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance (CNVD-2017-07088)
Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...
CVE-2017-8857
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...
CVE-2017-8857
CVE-2017-8857 affects Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. The vulnerability is in the bprd process and allows unauthenticated file copy and arbitrary remote command execution. The connected sources confirm an unauthenticated path via the bprd service that en...
CVE-2017-8857
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...
CVE-2017-8857: Incorrect Permission Assignment for Critical Resource
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...
Cisco IOS XE Smart Install Protocol Misuse (cisco-sr-20170214-smi)
The remote Cisco IOS XE device has the Smart Install Feature enabled. The Smart Install SMI protocol does not require authentication by design. The absence of an authorization or authentication mechanism in the SMI protocol between the integrated branch clients IBC and the director can allow a...
CVE-2017-2789
When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...
Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)
// // This exploit uses the pokemon exploit of the dirtycow vulnerability // as a base and automatically generates a new passwd line. // The user will be prompted for the new password when the binary is run. // The original /etc/passwd file is then backed up to /tmp/passwd.bak // and overwrites t...
Windows UAC Bypass Hack Leaves Systems Open to Malicious DLLs
Researchers have crafted a stealthy new way of bypassing Windows User Account Controls UAC that opens the door to attacks on targeted systems. According researchers, the bypass technique can fly under the radar of security solutions that monitor for this type of circumvention. The UAC bypass...
VMware ESX / ESXi NFC Traffic Handling DoS (VMSA-2013-0011) (remote check)
The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by a denial of service vulnerability in the Network File Copy NFC protocol due to improper handling of specially crafted NFC traffic. A man-in-the-middle attacker can exploit this to cause an unhandl...
VMware ESX / ESXi NFC and Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0003) (remote check)
The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - Java Runtime Environment JRE - Network File Copy NFC Protocol - OpenS...
VMware ESX / ESXi Multiple DoS (VMSA-2014-0001)
The remote VMware ESX / ESXi host is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to a NULL pointer deference flaw when handling Network File Copy NFC traffic. An unauthenticated, remote attacker can exploit this by intercepting and...
CVE-2006-1608
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI...
ProFTPd 1.3.5 文件复制
No description provided by source...
PT-2015-2242
Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 9000 devices version 11.11c Description The issue is related to resource management errors in the NX-OS network operating system. It allows a remote authenticated user to cause a denial of service, resulting in a device...
ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ProFTPD 1.3.5 ModCopy Command Execution', 'Description' = %q This module exploits the SITE CPFR/CPTO commands in ProFTPD version...