140 matches found
Cyberoam General Authentication Client 2.1.2.7 - (Server Address) Denial of Service Exploit
Exploit Title: Cyberoam General Authentication Client 2.1.2.7 - Denial of Service PoC Discovery by: Victor Mondragón Vendor Homepage: https://www.cyberoam.com Software Link: https://download.cyberoam.com/solution/optionals/i18n/Cyberoam%20General%20Authentication%20Client%202.1.2.7.zip Tested...
CVE-2017-18369
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the advremotelog.asp page and can be exploited through the syslogServerAd...
CVE-2017-18370
The ZyXEL P660HN-T1A v2 TCLinux Fw 7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP...
Bosch Video Management System 8.0 - Configuration Client Denial of Service (PoC)
Bosch Video Management System 8.0 - Configuration Client Denial of Service PoC Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service Poc Discovery by: Daniel Discovery Date: 2018-11-12 Software Name: Bosch Video Management System Software Version: 8.0 Vendor...
Trend Micro Virtual Mobile Infrastructure 5.5.1336 - Server address Denial of Service (PoC)
Trend Micro Virtual Mobile Infrastructure 5.5.1336 - Server address Denial of Service PoC Exploit Title: Trend Micro Virtual Mobile Infrastructure 5.5.1336 - 'Server address' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-09-01 Vendor Homepage:...
IBM WebSphere Portal Information Disclosure Vulnerability (CNVD-2017-37868)
IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. An information disclosure vulnerabili...
Error: "Your account cannot be added using this server address" When Adding a Store on Receiver
The following error is seen whileadding a store on Citrix Receiver: "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead."...
PHP Real Estate Script 3 Arbitrary File Disclosure
Exploit Title: php Real Estate Script Arbitrary File Disclosure Date: 2016-07-08 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.realestatescript.eu/ Version: v.3 Download Link : http://www.realestatescript.eu/downloads/realestatescript-v3.zip...
The vulnerability of the Firefox browser, which allows a remote attacker to bypass certificate verification
The vulnerability of the Firefox browser in handling alternative HTTP services allows a malicious actor to bypass the X.509 certificate verification for SSL servers by modifying the server address in the uri-host header of the HTTP/2 response...
The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Remote Procedure Call LRPC of Microsoft allows attackers to circumvent security restrictions. This vulnerability relates to the leakage of messages sent by the LRPC server to clients, if those messages contain data that is not intended for such messages. RPC considers suc...
ZOC SSH Client - Buffer Overflow (SEH) (PoC)
ZOC SSH Client - Buffer Overflow SEH PoC """ Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev Farhi...
subversion: credentials leak via MD5 collision
It was discovered that Subversion clients retrieved cached authentication credentials using the MD5 hash of the server realm string without also checking the server's URL. A malicious server able to provide a realm that triggers an MD5 collision could possibly use this flaw to obtain the...
subversion: credentials leak via MD5 collision
It was discovered that Subversion clients retrieved cached authentication credentials using the MD5 hash of the server realm string without also checking the server's URL. A malicious server able to provide a realm that triggers an MD5 collision could possibly use this flaw to obtain the...
aMSN 0.98.9 Web App - Multiple Vulnerabilities
Exploit for php platform in category web applications from argparse import ArgumentParser import urllib2 import string import random """ Preauth LFI and SQLi in the web app packaged with aMSN 0.98.9 """ def lfioptions: """ exploit the LFI """ addr =...
OPC UA Browse Next Request Command
...
Long time music network Download music crack! - Vulnerability warning-the black bar safety net
Long time music network: http://www.99music.net The music really much, how to break through the limit to download songs? Now teach you how to achieve: 1. Put ie's temporary folder all the contents emptied. 2. Open http://www.99music.net/song3.asp?id=25330&act=dx To view the temporary files home...
CVE-2004-0262
Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string...
Apache 1.01.21.3 - Server Address Disclosure
Apache 1.01.21.3 - Server Address Disclosure // source: https://www.securityfocus.com/bid/3169/info A vulnerability has been discovered in Apache web server that may result in the disclosure of the server's address. The problem occurs when a HTTP request containing the URI of a directory is...
