PT-2014-6312 · Sap · Sap Hana Extended Application Services

Name of the Vulnerable Software and Affected Versions: SAP HANA Extend Application Services XS affected versions not specified Description: The issue allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public. There is no information...

kernel: net: ping: refcount issue in ping_init_sock() function

A use-after-free flaw was found in the way the pinginitsock function of the Linux kernel handled the groupinfo reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system...

Patch Management: Dell KACE K1000 Computer Info Initialization

Binary data dellkacek1000getcomputerinfo.nbin...

AIX Java Advisory : java_apr2014_advisory.asc

The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities : - There is an information disclosure flaw in libjpeg and libjpeg-turbo allowing remote attackers access to uninitialized memory via crafted JPEG images. CVE-2013-6629 - A vulnerability ...

IBM GCM1632 1.20.0.22575 - Multiple Vulnerabilities

IBM GCM1632 1.20.0.22575 - Multiple Vulnerabilities Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and...

Trixbox XSS / LFI / SQL Injection / Code Execution Vulnerabilities

Trixbox suffers from cross site scripting, local file inclusion, SQL injection, and remote code execution vulnerabilities. Trixbox All Version - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected ...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2283-1)

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Michael S. Tsirkin discovered an information leak in the Linux kernel's...

CVE-2014-4347

Citrix NetScaler ADC and NetScaler Gateway (formerly Access Gateway) are affected by CVE-2014-4347. The vulnerability allows attackers to obtain sensitive information via cookie-related vectors on versions before 9.3-62.4 and 10.x before 10.1-126.12. Technical detail from SEC Consult and corrobor...

UBUNTU-CVE-2014-3487

The cdfreadpropertyinfo function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, does not properly validate a stream offset, which allows remote attackers to cause a denial of service application crash via a crafted CDF file...

MoreAmp (.maf) local Stack Buffer Overflow (SEH) (calc)

No description provided by source. Exploit Title : MoreAmp .maf local Stack Buffer Overflow SEH tested on windows xp SP 3 FR Author: MadjiX Special Greets:His0k4 where are you : Greets:Bibi-info , Silectovic , Volc4n0 my $file= MadjiX.maf; my $junk = \x41 x 108 ; my $nseh = \xeb\x06\x90\x90 ; my...

Info-ZIP UnZip 5.x File Name Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15968/info Info-ZIP 'unzip' is susceptible to a filename buffer-overflow vulnerability. The application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. This...

Saurus CMS Admin Panel - Multiple CSRF Vulnerabilities

No description provided by source. Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows...

Softbiz Resource Repository Script Blind SQL Injection Vulnerability

No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ Softbiz Resource repository script Blind SQL Vulnerability Normal version $ Author : Sangteamtham $ Home : Hcegroup.net & vnbrain.net $ Download...

InstantCMS 1.6 - Remote PHP Code Execution

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'InstantCMS 1.6 Remote PHP Code Execution', 'Description' = %q This module exploits an...

sphider 1.3.5 - Remote File Inclusion Vulnerability

No description provided by source. --------------------------------------------------------------------------| ----------------------------------------------------------------------------------| --------------------------------------------------------------------|...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

SantriaCMS - SQL Injection Vulnerability

No description provided by source. I Think, I can, But i'm just loser Author : Troy Date : Thursday, Dec 08, 2011 Location : /home/troy -------- CMS info ----------- Vendor : http://www.jasawebsitemurah.info/cms/ Exploit title : SantriaCMS SQL Injection Vulnerability Dork : view.php?idArtikel=...

Coppermine Photo Gallery <= 1.4.22 Remote Exploit

No description provided by source. !/usr/bin/perl Coppermine Photo Gallery = 1.4.22 Remote Exploit Need registerglobals = on and magicquotesgpc = off Based on vulnerabilities discussed at http://www.milw0rm.org/exploits/8713 Coded by girex use LWP::UserAgent; ifnot defined $ARGV0 banner; print -...

Joomla Component Contact Info 1.0 - SQL Injection Vulnerability

No description provided by source. Joomla comcontactinfocatid SQL-injection vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! ModuleName: comcontactinfo ! ScriptName: Joomla ! GoogleDork:...

attachmax dolphin <= 2.1.0 - Multiple Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...