152 matches found
The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar
The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...
Fedora 28 : php-symfony3 (2018-9c38d1dc1d)
3.4.14 2018-08-01 - security cve-2018-14774 HttpKernel fix trusted headers management in HttpCache and InlineFragmentRenderer nicolas-grekas - security cve-2018-14773 HttpFoundation Remove support for legacy and risky HTTP headers nicolas-grekas - bug 28003 HttpKernel Fixes invalid REMOTEADDR in...
The vulnerability of the weblogin_log function in the D-Link DIR-629-B1 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the webloginlog function /htdocs/cgibin of the D-Link DIR-629-B1 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack by sending a specially crafted...
Software Advice 1.0 Cross Site Scripting
Exploit Title: Reflected XSS at Software Advice Date: 27.05.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.softwareadvice.com/ Software Link: Software Advice Website Version: 1.0 Tested on: Kali Linux Reflected XSS Payload : '-confirmIsmail Tasdelen-' HTTP REQUEST HEADER :...
Boerse.de Cross SIte Scripting
Exploit Title: Reflected XSS at Boerse DE Date: 22.05.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.boerse.de Software Link: Website Version: 1.0.0 Tested on: Google Chrome / Mozilla FireFox Reflected XSS Payload : " " " PoC : General : Request URL:...
D-Link DIR-629-B1 'weblogin_log' function buffer overflow vulnerability
The D-Link DIR-629-B1 is a router device from AUO D-Link. A security vulnerability exists in the 'webloginlog' function in /htdocs/cgibin in the D-Link DIR-629-B1. An attacker can exploit this vulnerability by sending a session.cgi?ACTION=logout request with a long REMOTEADDR environment variable...
CVE-2018-10996
The webloginlog function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service buffer overflow via a session.cgi?ACTION=logout request involving a long REMOTEADDR environment variable...
PyStat - Advanced Netstat Using Python For Windows
PyStat is an Advanced Netstat Using Python For Windows. Features Know remote address of process Know remote ports of process Know which user using process along with title & PID Changelogs: Auto Install python modules support added in install.py Installation Guide: Download the .zip file Extract...
Vulnerability of Firefox and Firefox ESR browsers, which allows a hacker to forge the address bar
The vulnerability in the browser/base/content/browser.js function of Firefox and Firefox ESR is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to forge the URL address line remotely...
Sensio Labs Symfony Security Bypass Vulnerability
Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security bypass vulnerability exists in Sensio Labs...
CVE-2015-2309: Unsafe methods in the Request class
Affected Versions All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, 2.5.X, and 2.6.X versions of the Symfony HttpFoundation component are affected by this security issue. This issue has been fixed in Symfony 2.3.27, 2.5.11, and 2.6.6. Note that no fixes are provided for Symfony 2.0, 2.1, 2.2, and 2.4 as the...
Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...
Sun JDK 1.1.x,Sun JRE 1.1.x Listening Socket Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...
Potential Remote Address Spoofing Vector in Zend\Http\PhpEnvironment\RemoteAddress
More info at https://framework.zend.com/security/advisory/ZF2013-04...
Jarida 1.0 - Multiple Vulnerabilities
Jarida 1.0 - Multiple Vulnerabilities Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 01...
PT-2010-5118
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36.2 Description The issue is related to the econet sendmsg function in the Linux kernel. It allows local users to cause a denial of service, resulting in a NULL pointer dereference and OOPS, by making a...
WordPress Plugin Accept Signups 0.1 - Cross-Site Scripting
Exploit Title: WORDPRESS Plugin Accept Signups PERSISTENT XSS Date:21/12/2010 Author: clshack Software Link:http://wordpress.org/extend/plugins/accept-signups/ Version:0.1 Tested on: wordpress 3.03 CVE : Vulnerable code accept-signupssubmit.php: requireonce'../../../wp-config.php';//addslashes to...
Cybershade CMS 0.2b Session Hijacking PoC Vulnerability
Exploit for unknown platform in category web applications ======================================================= Cybershade CMS 0.2b Session Hijacking PoC Vulnerability ======================================================= p0c!: Session Hijacking Cybershade CMS 0.2b Session Hijacking PoC...
XSS Private Messagging On PhpBB3(0day)
No description provided by source. Authors: Dante90, WaRWolFz Crew T0T4L, Ex Member Crew Title: XSS Private Messagging On PhpBB3 By Dante90 0-Day & Priv8 MSN: [email protected] Web: www.warwolfz.org Description: XSS Cross Site Scripting, Grab Status: 100%. XSS Private Messagging On PhpBB3 B...
