7683 matches found
vporn.com XSS vulnerability
Open Bug Bounty ID: OBB-211735 Description| Value ---|--- Affected Website:| vporn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-6266
cccaajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 host or 2 apikey parameter in a register action, 3 enable parameter ...
Design/Logic Flaw
cccaajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 host or 2 apikey parameter in a register action, 3 enable parameter ...
CVE-2016-6266: Improper Input Validation
cccaajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 host or 2 apikey parameter in a register action, 3 enable parameter ...
Updated xen packages fix security vulnerability
This xen update is based on upstream 4.5.5 maintenance release, and fixes the following security issues: The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service host disk consumption by writing to stdout or stderr CVE-2014-3672 The xrstor...
MGASA-2017-0012 Updated xen packages fix security vulnerability
This xen update is based on upstream 4.5.5 maintenance release, and fixes the following security issues: The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service host disk consumption by writing to stdout or stderr CVE-2014-3672 The xrstor...
FLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)
Introduction This post continues the FireEye Labs Advanced Reverse Engineering FLARE script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for querying and altering dynamic binary state conveniently, iteratively, and at scale. flare-qdb works on...
DEBIAN-CVE-2016-1922
QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...
DT Register, sql/xss, 3.1.12 / 2.8.18 and previous
DT Register Vulnerable version: 3.1.12 / 2.8.18 and previous sql/xss http://www.dthdevelopment.com/dth-news/dt-register-3.1.13-security-release.html http://www.dthdevelopment.com/joomla-components/dt-register-event-registration-for-joomla.html developer did not inform VEL...
WordPress Plugin WP Private Messages 1.0.1 - SQL Injection (1)
WordPress Plugin WP Private Messages 1.0.1 - SQL Injection 1 Exploit Title: WP Private Messages 1.0.1 – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-private-messages/ Software Link: https://wordpress.org/plugins/wp-private-messages...
login.desmoinesregister.com XSS vulnerability
Vulnerable URL: https://login.desmoinesregister.com/PDEM-GUP-ET/authenticate/?from-state=returning-user-get-redirect%27%22--%3E%3C/Title/%3E%3C/Script/%3E%3CSvg%20/Onload=confirmOPENBUGBOUNTY%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...
Nidesoft MP3 Converter 2.6.18 - Local Buffer Overflow (SEH)
Nidesoft MP3 Converter 2.6.18 - Local Buffer Overflow SEH !python Exploit title: MP3 converter v 2.6.18 License code SEH exploit Date: 2016-12-15 Vendor homepage: http://www.nidesoft.com/mp3-converter.html Download: http://www.nidesoft.com/downloads/mp3-converter.exe Tested on: Win7 SP1 Author:...
Delta Industrial Automation WPLSoft Register Data File Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation WPLSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Joomla extension DT Register SQL Injection Vulnerability
Joomla! DT Register is an online registration system. A SQL injection vulnerability exists in the cat0 parameter of the index.php page in Joomla! DT Register 3.1.12 and prior versions, which stems from the program's failure to adequately filter user-submitted input, and which can be exploited by ...
Joomla! Component DT Register - 'cat' SQL Injection
Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...
Joomla DT Register SQL Injection
Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...
Debian Security Advisory DSA 3729-1 (xen - security update)
Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-7777 XSA-190 Jan Beulich from SUSE discovered that Xen does not properly honor CR0.TS and CR0.EM for x86 HVM guests, potentially allowi...
Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow (SEH)
!/usr/bin/python Open the DupScout client and click on Tools click on Connect Network Drive type the content of boom.txt in the "User Name" field. The payload is sent to the DupScout server port 9126 SEH based stack overflow in DupScout server Tested in Windows 7 Professional For educational...
Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow (SEH)
Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow SEH !/usr/bin/python Open the DupScout client and click on Tools click on Connect Network Drive type the content of boom.txt in the "User Name" field. The payload is sent to the DupScout server port 9126 SEH based stack overflow in DupScout...
PT-2017-12377 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.11 Description: The issue allows privileged KVM guest OS users to cause a denial of service, leading to an assertion failure and host OS crash, by accessing the Performance Monitors Cycle Count Register...