WinaXe Plus Detection (Windows SMB Login)

Detects the installed version of WinaXe Plus. The script logs in via smb, searches for WinaXe Plus in the registry and gets the version from SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

ManageEngine ADManager Plus < 6.5 build 6541 Multiple Vulnerabilities

ManageEngine ADManager Plus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WinaXe Plus Buffer Overflow Vulnerability - Windows

WinaXe Plus is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:winaxe:plus";...

WinaXe Plus 8.7 - Remote Buffer Overflow

WinaXe Plus 8.7 - Remote Buffer Overflow Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version: 8.7 Tested on:...

WinaXe Plus 8.7 Buffer Overflow

Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version: 8.7 Tested on: Windows Server 2008 R2 x64, Windows 7 SP...

WinaXe Plus 8.7 - Remote Buffer Overflow

Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version: 8.7 Tested on: Windows Server 2008 R2 x64, Windows 7 SP...

WinaXe Plus 8.7 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version...

ManageEngine ADManager Plus 6.5.40 Cross Site Scripting / SQL Injection

ADVISORY INFORMATION ======================================== Title: ManagEnegine ADManager Plus = 6.5.40 Multiple Vulnerabilities Application: ManagEnegine Admanager Remotely Exploitable: Yes Authentication Required: Yes Versions Affected: = 6.5.40 Technology: Java Vendor URL:...

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3-elevation of Privilege

Vulnerability plugin address https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Vulnerability description You can login to anyone's account without knowing the password. This vulnerability is due to incorrect use wpsetauthcookie . File:...

WordPress WP Support Plus Responsive Ticket System 7.1.3 Plugin - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact:...

WordPress Plugin WP Support Plus Responsive Ticket System Elevation of Privilege Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WordPress plugin WP Support Plus Responsive Ticket System has an elevation of privilege vulnerability that can b...

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege Escalation

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege Escalation Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper...

WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege Escalation

Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/...

ManagEnegine ADManager Plus 6.5.40 - Multiple Vulnerabilities

ManagEnegine ADManager Plus 6.5.40 - Multiple Vulnerabilities 1. ADVISORY INFORMATION ======================================== Title: ManagEnegine ADManager Plus = 6.5.40 Multiple Vulnerabilities Application: ManagEnegine Admanager Remotely Exploitable: Yes Authentication Required: Yes Versions...

CVE-2016-10115

NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or...

CVE-2016-10115

NETGEAR Arlo base stations with firmware 1.7.56178 and earlier, Arlo Q devices with firmware 1.8.05551 and earlier, and Arlo Q Plus devices with firmware 1.8.16094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or...

Free Followers Plus - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Followers Plus published at the 'play' market has multiple vulnerabilities...

WordPress Support Plus Responsive Ticket System Plugin <= 7.1.3 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

UBUNTU-CVE-2016-2334

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image...

DEBIAN-CVE-2016-2334

Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image...