The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.

The vulnerability of the Oracle database management system, related to the MySQL Server component, allows malicious actors to compromise the confidentiality, integrity, and accessibility of data...

Core FTP Server 32-bit Build 587 - Heap Overflow

Core FTP Server 32-bit Build 587 - Heap Overflow -- coding: cp1252 -- Exploit Title: Core FTP Server 32-bit - Build 587 Heap Overflow Date: 05/10/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.coreftp.com/ Vulnerable Version Download:...

Core FTP Server 32-bit Build 587 - Heap Overflow

Exploit for windows platform in category dos / poc -- coding: cp1252 -- Exploit Title: Core FTP Server 32-bit - Build 587 Heap Overflow Date: 05/10/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.coreftp.com/ Vulnerable Version Download:...

Core FTP Server 32-bit Build 587 - Heap Overflow

-- coding: cp1252 -- Exploit Title: Core FTP Server 32-bit - Build 587 Heap Overflow Date: 05/10/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.coreftp.com/ Vulnerable Version Download: http://coreftp.com/server/download/archive/CoreFTPServer587.exe...

Error: 403 forbidden | Post authentication when accessing through NetScaler Gateway

We see 403 forbidden error post authentication when accessing the apps through Netscaler Gateway...

DropBearSSHD 2015.71 - Command Injection

Exploit for linux platform in category remote exploits VuNote ============ Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3116 Version: 0.2 Date: Mar 3rd, 2016 Tag: dropbearsshd xauth command injection may lead to forced-command bypass Overview -------- Name: dropbear...

Yeager CMS 1.2.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications title: Multiple Vulnerabilities product: Yeager CMS vulnerable version: 1.2.1 fixed version: 1.3 CVE number: CVE-2015-7567, CVE-2015-7568, CVE-2015-7569, CVE-2015-7570 , CVE-2015-7571, CVE-2015-7572 impact: Critical homepage:...

The vulnerability of the MySQL database management system allows a malicious intruder, after passing authentication, to compromise the accessibility of data.

The vulnerability of the MySQL database management system may allow a hacker, after passing the authentication process, to compromise the accessibility of data by using the Server subcomponent: Compiling...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the hal-debuginfo package of the OpenSUSE operating system. Exploiting these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have...

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the dbus-1-debugsource package in the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed the...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dropbear package up to version 0.47 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the openldap-devel-2.3.43 package for the Red Hat Enterprise Linux operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who ha...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the krb5-1.10.3 package of the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a...

Synergy 2.0 Local File Inclusion

Synergy CMS lfi vulnerability Product: Synergy CMS Vulnerability: Post-authentication local file inclusion Impact: Medium/Limited Authors: Jan Hodermarsky and Lukas Andruska Vendor Homepage: http://www.s-e.lt Affected versions: = 2.0 Tested on: Mozilla Firefox 36 Google Dork: intext:"Svetainių...

sysax--5.57-Directory-Traversal

Title: Sysax Multi Server 5.57 Directory Traversal Tool Post Auth Tested on: XP SP3 32bit and Server 2003 SP2 32bit Date Discovered: March 27, 2012 Vendor Contacted: March 29, 2012 Vendor Response: April 3, 2012 Vendor Fixed: Currently working on fix, check my site for update import...

HP's Zero Day Initiative Changes Bug-Buying Guidelines

HP’s Zero Day Initiative has decided to adjust its guidelines and criteria or buying some vulnerabilities in the future, eliminating some large classes of bugs from its menu. The group, which has been among the more visible and prominent of the vulnerability purchasing programs since its inceptio...

Immunity Canvas: CVE_2014_5460

Name| CVE20145460 ---|--- CVE| CVE-2014-5460 Exploit Pack| CANVAS Description| CVE-2014-5460 Notes| CVE Name: CVE-2014-5460 VENDOR: Tribulant Changelog: https://wordpress.org/plugins/slideshow-gallery/changelog/ Notes: If the Suhosin-Patch is installed typically announced in the PHP banner the...

DotDefender <= 3.8-5 No Authentication Remote Code Execution Through XSS

No description provided by source. / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command Execution Vulnerability:...

spiceworks 5.3.75941 - Stored XSS and post-auth SQL Injection

No description provided by source. Product: SpiceWorks Version: 5.3.75941 Vendor Site: http://www.spiceworks.com/community/ Software Download Link: http://www.spiceworks.com/download/?utmsource=comm-secondary-link&utmmedium=website&utmcampaign=homepage Installer Filename: Spiceworks.exe MD5:...

op5 Monitoring 5.4.2 - (VM Applicance) Multiple Vulnerabilities

No description provided by source. Author: loneferret of Offensive Security Product: op5 Monitoring VM appliance Version: 5.4.2 Vendor Site: http://www.op5.com/ Software Download: http://www.op5.com/get-op5-monitor/get-started/ Software Description: op5 is a market leading developer of Open Sourc...