Polycom IP Phone - Web Interface Data Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , 'Line 1' of 'Polycom IP Phone' software. The vulnerability allows the attacker to disclosure the password of the username for the ph...

Simple web-server Directory Traversal Vulnerability

Simple web-server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further...

Nmap NSE net: smtp-open-relay

Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...

IGSS 8 ODBC Server Multiple Remote Uninitialized Pointer Free DoS

Exploit for windows platform in category dos / poc !/usr/bin/python igss.py IGSS 8 ODBC Server Multiple Remote Uninitialized Pointer Free DoS Jeremy Brown / jbrown at patchtuesday dot org Mar 2011 There are multiple remote uninitialized pointer free conditions in IGSS's ODBC server. By sending a...

CVE-2011-1414

Cross-site scripting XSS vulnerability in the tibbr web server, as used in TIBCO tibbr 1.0.0 through 1.5.0 and tibbr Service 1.0.0 through 1.5.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Kunena < 1.5.13, < 1.6.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done...

Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure

Affected products ================= Dokeos 1.8.6.1 / 2.0 Chamilo 1.8.7.1 Resume ====== Two file disclosure flaws exists on these LMS platforms, which could allow an attacker registered on the system to obtain files from the server, i.e your database configuration file, or any other file readeable...

Built2Go PHP Shopping - SQL Injection

Built2Go PHP Shopping - SQL Injection Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c:...

CVE-2010-3616

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service communications-interrupted state and DHCP client service loss by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios...

Ecava IntegraXor 3.6.4000.0 Directory Traversal

Exploit for windows platform in category remote exploits Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi Auriemma e-mail: email protected...

OpenTTD Multiple use-after-free Denial of Service vulnerability

This host is installed with OpenTTD and is prone to multiple denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbopenttdmultuseafterfreedosvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD Multiple use-after-free Denial of Service Vulnerabilities Authors: Veerendra GG Copyright:...

SiteEngine 6.0 SQL注入漏洞

网站引擎SiteEngine,全称：博卡网站引擎管理系统，软件基于PHP程序和Mysql数据库开发，采用B/S体系结构。 利用这个漏洞需要评论功能开启默认开启 SiteEngine 6.0 厂商补丁： SiteEngine ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.siteengine.net/...

kernel: nfsd4: bug in read_buf

Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service panic or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the readbuf and...

Fedora 12 : subversion-1.6.13-1.fc12.1 (2010-16115)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

PYSEC-2010-22

pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the number of in-progress data connections by reading the response to this command...

Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Overview Oracle iPlanet Web Server formerly Sun Java System Web Server contains a cross-site request forgery vulnerability. Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Yoshihiro...

N-point virtual host system fatal vulnerability-vulnerability warning-the black bar safety net

The author of the article:worries people This vulnerability I found already a long time since the time is relatively busy there has been no release of.. As relates to the server more I will not publish how to get a background PSW.。。。。 First, the analysis under the sitehost. asp his fatal...

OTRS -- Multiple XSS and denial of service vulnerabilities

OTRS Security Advisory reports: Multiple Cross Site Scripting issues: Missing HTML quoting allows authenticated agents or customers to inject HTML tags. This vulnerability allows an attacker to inject script code into the OTRS web-interface which will be loaded and executed in the browsers of...

Один тип уязвимостей Питон программ

Один тип уязвимостей Питон программ. Авторы: prusle и djp. Неустойчивость к ошибкам библиотечных функций языка Си таких как stscpy, sprintf, strcat и многих других позволяет получать полный контроль над ОС, написанными на Си. Изобретательность хакеров проявилась в изобретении методов эксплуатации...

Microsoft Office Excel PivotTable Cache Data Record Handling Overflow

Added: 08/19/2010 CVE: CVE-2010-2562 BID: 42199 OSVDB: 66991 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel is vulnerable to a stack buffer overflow due to a logic error when parsing...