2195 matches found
Apple iOS v6.1 (10B143) - Pass Code Bypass Vulnerability 2
Document Title: =============== Apple iOS v6.1 10B143 - Pass Code Bypass Vulnerability 2 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=875 Advisory http://www.vulnerability-lab.com/getcontent.php?id=874 Video Release Date: ============= 2013-02-21...
Apple iOS v6.1 (10B143) - Pass Code Bypass Vulnerability 2
Document Title: =============== Apple iOS v6.1 10B143 - Pass Code Bypass Vulnerability 2 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=875 Advisory http://www.vulnerability-lab.com/getcontent.php?id=874 Video Release Date: ============= 2013-02-21...
Adobe Flash Player Regular Expression Heap Overflow
This module exploits a vulnerability found in the ActiveX component of Adobe Flash Player before 11.5.502.149. By supplying a specially crafted swf file with special regex value, it is possible to trigger a memory corruption, which results in remote code execution under the context of the user, a...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...
WordPress Kakao Theme SQL Injection
Exploit Title : Wordpress theme kakao Sql Injection Author : Iranian DataCoders Security Team Discovered By : sil3nt Home : www.datacoders.org/ Security Risk : High - SQL Injection Dork : inurl:themes/wilderness/gallery.php Expl0iTs : Target/wp-content/themes/kakao/sonHaberler.php?ID=sql D3m0 :...
CVE-2011-5166: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the 1 USER, 2 PASS, 3 REIN, 4 QUIT, 5 PORT, 6 PASV, 7 TYPE, 8 STRU, 9 MODE, 10 RETR, 11 STOR, 12 APPE, 13 ALLO, 14 REST, 15 RNFR, 16 RNTO, 17 ABOR, 18 DELE, 19 CWD, 20 LIST, ...
Memory corruption
Summer Institute of Linguistics SIL Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via vectors related to the 1 Silf::readClassMap and 2...
CVE-2012-3971
Summer Institute of Linguistics SIL Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via vectors related to the 1 Silf::readClassMap and 2...
CVE-2012-3971: Improper Restriction of Operations within the Bounds of a Memory Buffer
Summer Institute of Linguistics SIL Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via vectors related to the 1 Silf::readClassMap and 2...
PHP. S3. TO upload the exploit-vulnerability warning-the black bar safety net
PHP S3 upload vulnerability This web-based vulnerability is more serious, can directly access the shell, is given below exploits the method of Vulnerability information: Can any upload the PHP, TXT, JPG, PNG format file change your shell to sh3ll.php.jpg or sh3ll.php%0%0.1.jpg Exploit demo: Use:...
Scientific Linux Security Update : xen on SL5.x i386/x86_64
CVE-2009-3525 Xen: PyGrub missing support for password configuration command The pyGrub boot loader did not honor the 'password' option in the grub.conf file for para-virtualized guests. Users with access to a guest's console could use this flaw to bypass intended access restrictions and boot the...
Design/Logic Flaw
The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data...
CVE-2012-3888: Undefined Security Weakness
The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data...
Simple Document Management System 1.1.5 / 2.0 SQL Injection
Simple Document Management System 1.1.5 / 2.0 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS twitter: @JossGongora contact: sys-projectathotmaildotcom website: http://www.hack0wn.com/ download: http://mirror.us.cc.com.au/pub/cafuego/sdms ----------- version 2.0...
kernel security and bug fix update
2.6.18-308.8.1.el5 - net sock: validate datalen before allocating skb in sockallocsendpskb Jason Wang 816290 816106 CVE-2012-2136 - net tg3: Fix VLAN tagging assignments John Feeney 817691 797011 - net ixgbe: do not stop stripping VLAN tags in promiscuous mode Andy Gospodarek 809791 804800 - s390...
w-CMS 2.0.1 CSRF / XSS / File Disclosure / Shell Upload
+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...
w-CMS 2.0.1 - Multiple Vulnerabilities
w-CMS 2.0.1 - Multiple Vulnerabilities +----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1...
w-CMS 2.0.1 - Multiple Vulnerabilities
+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...
Free Configuration Check Tool by eEye Digital Security
Free Configuration Check Tool by eEye Digital Security eEye Digital Security, the industry's leading innovator of threat management solutions, just released new research, "Working Toward Configuration Best Practices" . Findings verify that proper configuration and mitigations remain the most...
httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix
The modproxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to...