372 matches found
CVE-2014-8388
Stack-based buffer overflow in Advantech WebAccess, formerly BroadWin WebAccess, before 8.0 allows remote attackers to execute arbitrary code via a crafted ipaddress parameter in an HTML document...
Advantech WebAccess dvs.ocx IPAddress Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Updated net-snmp packages fix CVE-2012-6151
Updated net-snmp packages fix security vulnerability: Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service crash or infinite loop, CPU consumption, and hang by causing the AgentX subagent to...
Microsoft windows remote desktop PoC C# Exploit
It Case The Dead Blue Screen :D 4 DoS ! //ms12-020 "chinese shit" PoC //Tested On Win7 Ultimate & Win 2008 Server & Win 2003 Serrver R2 //C Coded By Yomi :D using System; using System.Net; using System.Net.Sockets; namespace RDPPoCExploit class Program public static readonly string strshell =...
CVE-2011-5150
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...
CVE-2011-5150
CVE-2011-5150 describes multiple XSS vulnerabilities in SpamTitan 5.07 and possibly earlier. The issue allows remote attackers or authenticated users to inject arbitrary JavaScript/HTML via the (1) ipaddress or (2) domain parameter to setup-network.php, representing a different vector from CVE-20...
CVE-2011-5150: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...
PT-2012-2128
Name of the Vulnerable Software and Affected Versions SpamTitan versions 5.07 and earlier Description The issue allows remote attackers or authenticated users to inject arbitrary web script or HTML. This can be achieved via the ipaddress or domain parameter to the "setup-network.php" endpoint...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 ipAddress, 2 act, 3 username, and 4 unspecified other parameters in a authuser.php; and the 5 username and 6 unspecified other...
Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit
No description provided by source. !-- Change url /str0ke -- form method="post" name="addform" action="http://url/admin/iis/IISActions.asp?ActionType=AddSite&hostcustid=1&hostingplans=1" table tr class="looplistingDark" td width="19%" class="Contents"Website Name : /td td width="73%"...