CVE-2014-5454

Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2014-5356

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

CVE-2014-5356

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

CVE-2014-5454: Undefined Security Weakness

Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

PT-2014-6484

Name of the Vulnerable Software and Affected Versions SAS Visual Analytics version 6.4M1 Description The issue concerns an unrestricted file upload vulnerability in the image upload module. This allows remote authenticated users to execute arbitrary code by uploading a file with an executable...

UBUNTU-CVE-2014-5356

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

Global Flash Galleries - swfupload.php Unauthenticated Image Upload Weakness

The global-flash-galleries WordPress plugin was affected by a swfupload.php Unauthenticated Image Upload Weakness security vulnerability...

Mail.ru: target.mail.ru: XSS

POST /ajax/uploadimage/ HTTP/1.1 Host: target.mail.ru User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:28.0 Gecko/20100101 Firefox/28.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, defla...

DMXReady Faqs Manager <= 1.1 - Remote Contents Change Vulnerability

No description provided by source. Title : DMXReady Faqs Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 24.97 $ Dork : inurl:incfaqsmanager.asp DorkEx :...

Etomite CMS <= 0.6.1 (rfiles.php) Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Etomite CMS = 0.6.1 'rfiles.php' remote command execution\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo google dork: \Content managed by the Etomite Content Management...

V-CMS PHP File Upload and Execute

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Wordpress Fancy Gallery Plugin 1.2.4 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability Version : 1.2.4 link : http://codecanyon.net/item/fancy-gallery-wordpress-plugin/400535 Price : 18$ Date : 22-06-2012 Google Dork : inurl:/wp-content/plugins/radykal-fancy-galler...

Image_Upload Script 2.0 - Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23132/info ImageUpload Script is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

E-Uploader Pro <= 1.0 Image Upload with Code Execution Vulnerability

No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...

Geeklog <= 1.6.0sr2 - Remote File Upload

No description provided by source. ============================================================================== Geeklog = v1.6.0sr2 - Remote File Upload Discovered: JaL0h Software Site: http://www.geeklog.net Dork: By Geeklog Created this page in +seconds +powered...

DMXReady Catalog Manager <= 1.1 - Remote Contents Change Vuln

No description provided by source. Title : DMXReady Catalog Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 149.97 $ Dork : inurl:inccatalogmanager.asp DorkEx :...

DMXReady Document Library Manager <= 1.1 Contents Change Vuln

No description provided by source. Title : DMXReady Document Library Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 39.97 $ Dork : inurl:incdocumentlibrarymanager.asp DorkEx :...

DMXReady Photo Gallery Manager <= 1.1 Contents Change Vulnerability

No description provided by source. Title : DMXReady Photo Gallery Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 39.97 $ Dork : inurl:incphotogallerymanager.asp DorkEx :...

Micronetsoft Rental Property Management Website SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Micronetsoft Rental Property Management Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:179$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects,...

PunBB Automatic Image Upload <= 1.3.5 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Remote SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowStats = USERGROUP;' is not commented in uploadimgconfig.php FIND LINE: 75...