Remote Vulnerability Testing Framework: Pocsuite

Pocsuite is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec Security Team. It comes with a powerful proof-of-concept engine, many niche features for the ultimate penetration testers and security researchers. Requirements Python 2.6...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Privilege Gain Vulnerability

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...

Techsoft Web Solutions CMS SQL Injection Vulnerability

TECHSOFT is a WEB solution. A remote SQL injection vulnerability exists in Techsoft Web Solutions CMS. A remote attacker is able to execute malicious sql commands to connect to dbms...

Dorsa Web CMS SQL Injection Vulnerability

A remote SQL injection vulnerability exists in Dorsa Web CMS. A remote attacker is able to execute malicious sql commands to connect to dbms...

Cades SQL Injection Vulnerability

Cades is an online service application. Cades has a remote SQL injection vulnerability. A remote attacker is able to execute malicious sql commands to connect to dbms...

Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers Denial of Service Vulnerability

Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers is a set of operating systems that run in 9000 Series router devices. A security vulnerability in the Local Packet Transport Services LPTS network stack of the Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers...

Techsoft WS CMS SQL Injection Vulnerability

TECHSOFT is a WEB solution. A remote SQL injection vulnerability exists in Techsoft Content Management System 2016 Q2. A remote attacker is able to execute malicious SQL commands to connect to dbms...

IRZ RUH2 Design Vulnerability

IRZ RUH2 is a serial-to-network connector system from the Russian company IRZ. A security vulnerability exists in the iRZ RUH2. A remote attacker could exploit the vulnerability to upload firmware with an unavailable patch...

WP Good News Themes Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Wordpress Good News Themes, which can be exploited by remote attackers to inject client-side scripting code...

Microsoft Excel 2010 - Crash (PoC) (2)

Exploit for windows platform in category dos / poc Microsoft Office is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application. ---------------------------------------------------------------------- Found : 11.05.2016 More:...

Meteocontrol WEB'log Arbitrary Command Execution Vulnerability

Meteocontrol WEB'log is a web-based SCADA system that provides energy and power configuration management functions using different connected devices. A security vulnerability exists in the access command shell-like functionality of several Meteocontrol WEB'log products, which could be exploited b...

Multiple I-O DATA DEVICE Product PIN Recovery Vulnerabilities

I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-S, WN-GDN/R3-U, and WN-GDN/R3-C are wireless LAN router products from I-O DATA DEVICE Japan. A security vulnerability exists in several I-O DATA DEVICE products, which allows remote attackers to gain access to the network by performing a brute-force attack to...

Panasonic FPWIN Pro Buffer Overflow Vulnerability (CNVD-2016-03208)

Panasonic FPWIN Pro is a set of programming software for all FP series PLCs Programmable Logic Controllers from Panasonic. A buffer overflow vulnerability exists in Panasonic FPWIN Pro, which can be exploited by a remote attacker to write data outside of array boundaries with the help of index...

PT-2016-1976 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.213 and earlier Description: The issue is related to errors in the code of the Flash Player platform, which can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of...

PT-2016-1974 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.213 and earlier Description: The issue is related to errors in the code of the Flash Player platform, which can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of...

New Era Company CMS SQL Injection Vulnerability

A remote sql injection vulnerability exists in the New Era Company content management system. A remote attacker is able to execute sql commands in the application and connect to dbms...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment...

NetBSD bozohttpd CGI Processor Arbitrary Code Execution Vulnerability

NetBSD is a free and open source Unix-like operating system. A security vulnerability in NetBSD's bozohttpd CGI processor allows remote attackers to submit special requests to execute arbitrary code...

Oracle MySQL Server: Unspecified Vulnerability in DML Subcomponent

Oracle MySQL is an open source relational database management system. A security vulnerability exists in the Server:DML subcomponent of Oracle MySQL that could be exploited by remote attackers to compromise the integrity and availability of the system...