2083 matches found
phpBB <= 2.0.20 (Admin/Restore DB/default_lang) Remote Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PhpBB = v2.0.20 \Admin/Restore Database/defaultlang remote commands execution\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo - you need an admin sid, works regardless of...
Alt-N MDaemon WorldClient 13.0.3 - Multiple Vulnerabilities
No description provided by source. ====================================================================== Alt-N MDaemon's WorldClient Predictable Session ID Vulnerability ====================================================================== Software: Alt-N MDaemon v13.0.3 and prior versions...
AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc2 echo Usage: php .$argv0...
ZeroShell 'cgi-bin/kerbynet' - Local File Disclosure Vulnerability
No description provided by source. Introduction to the PoC : ====================================================================== In this distribution, the managment website is a binary file named kerbynet interpreted in cgi-bin directory here : /cdrom/usr/local/apache2/cgi-bin/kerbynet So all...
phosheezy 2.0 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote Command Execution Exploit by Osirys osirysatlivedotit osirys.org Greets: HaVoC, x0r, jay, BlackLight lol at athos...
gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)
A flaw was found in the way GnuTLS parsed session IDs from ServerHello messages of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session ID value, which would trigger a buffer overflow in a connecting TLS/SSL client application using GnuTLS, causing the...
Bilyoner mobile apps prone to various SSL/TLS attacks
===================================================================== Sceptive Security Advisory Synopsis: Bilyoner mobile apps prone to various SSL/TLS attacks Product: Various mobile applications Advisory URL: http://sceptive.com/p/bilyoner-mobile-apps-prone-to-various-ssltls-attacks Advisory...
Important: Red Hat Security Advisory: gnutls security update
Updated gnutls packages that fix two security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CVE-2014-3976
Buffer overflow in A10 Networks Advanced Core Operating System ACOS before 2.7.0-p6 and 2.7.1 before 2.7.1-P155 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long session id in the URI to sysreboot.html. NOTE: some of these details are obtain...
CVE-2014-3976: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in A10 Networks Advanced Core Operating System ACOS before 2.7.0-p6 and 2.7.1 before 2.7.1-P155 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long session id in the URI to sysreboot.html. NOTE: some of these details are obtain...
SuSE 11.3 Security Update : gnutls (SAT Patch Number 9320)
GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed. Further information is available at http://www.gnutls.org/security.htmlGNUTLS-SA-2014-3 These security issues have been fixed : -...
PT-2014-5649
Name of the Vulnerable Software and Affected Versions A10 Networks Advanced Core Operating System ACOS versions prior to 2.7.0-p6 A10 Networks Advanced Core Operating System ACOS versions prior to 2.7.1-P1 55 Description The issue allows remote attackers to cause a denial of service crash and...
Oracle Linux 5 : gnutls (ELSA-2014-0594)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0594 advisory. 1.4.1-16 - added missing check for null pointer 1102355 1.4.1-15 - fix session ID length check and null pointer dereference 1102355 - fix minitasn1...
SUSE-SU-2015:0675-1 Security update for gnutls
GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed. Further information is available at http://www.gnutls.org/security.htmlGNUTLS-SA-2014-3 These security issues have been fixed: Possible...
DEBIAN-CVE-2014-3466
Buffer overflow in the readserverhello function in lib/gnutlshandshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service memory corruption or possibly execute arbitrary code via a long session id in a ServerHello message...
gnutls security update
2.8.5-14 - fix session ID length check 1102024...
gnutls security update
1.4.1-16 - added missing check for null pointer 1102355 1.4.1-15 - fix session ID length check and null pointer dereference 1102355 - fix minitasn1 issues 1102355 - Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch...
PT-2014-2307
Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.18.6 MediaWiki versions 1.19.x prior to 1.19.3 MediaWiki versions 1.20.x prior to 1.20.1 Description The issue allows remote attackers to hijack web sessions via the session id. This is related to a session fixati...
UBUNTU-CVE-2014-3466
Buffer overflow in the readserverhello function in lib/gnutlshandshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service memory corruption or possibly execute arbitrary code via a long session id in a ServerHello message...