CVE-2014-5407: Stack-based Buffer Overflow

Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier allow local users to cause a denial of service application halt via a malformed 1 setting file or 2 disturbance recording file...

LiveOptim 1.1.3 - Configuration Setting Manipulation CSRF

The SEO Plugin LiveOptim WordPress plugin was affected by a Configuration Setting Manipulation CSRF security vulnerability...

Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF

The Twitget WordPress plugin was affected by a twitget.php Twitter Setting Manipulation CSRF security vulnerability...

blogVault 1.05 - admin.php blogVault Key Setting CSRF

The Backup & Staging – BlogVault Backups WordPress plugin was affected by an admin.php blogVault Key Setting CSRF security vulnerability...

IndiaNIC FAQs Manager 1.0 - FAQ Setting Manipulation CSRF

The faqs-manager WordPress plugin was affected by a FAQ Setting Manipulation CSRF security vulnerability...

IndiaNIC Testimonial 2.2 - Setting Manipulation CSRF

The Testimonial WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

SexyBookmarks - Setting Manipulation CSRF

The sexybookmarks WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

qTranslate 2.5.34 - Setting Manipulation CSRF

The qtranslate WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

WP Maintenance Mode 1.8.7 - Setting Manipulation CSRF

The WP Maintenance Mode WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Stream Video Player <= 1.4.0 - Setting Manipulation CSRF

The Stream Video Player WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

WP-Print 2.51 - Setting Manipulation CSRF

The WP-Print WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

FunCaptcha 0.3.2- Setting Manipulation CSRF

The funcaptcha WordPress plugin was affected by security vulnerability...

Top 10 <= 1.9.2 - Setting Manipulation CSRF

The Top 10 – Popular posts plugin for WordPress WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Better Search < 1.3 - admin.inc.php Setting Manipulation CSRF

The Better Search WordPress plugin 1.2.1 and below was affected by an admin.inc.php Setting Manipulation CSRF security vulnerability...

Schneider Modicon M340 Web Server Hidden Information Disclosure Vulnerability

From the page provided by the Modicon M340's web server, the service only provides viewing, monitoring, diagnostics and username, password setting functions. However, after logging in with the Modicon M340's FTP server fixed login username and password: sysdiag/factorycast@schneider, you can find...

Host Header Poisoning - ownCloud

Due to trusting user supplied input and interpret it as Host header an attacker is able to craft a password reset mail with a link pointing to his own site. If a user clicks on the link or a software e.g. antivirus is accessing the link the attacker is able to reset the user password. Affected...

Joomla JE Media Player Component LFI Vulnerability

No description provided by source. Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15.00 Author : Sid3^effec...

Advanced Guestbook 2.2/2.3 User-Agent HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14391/info Advanced Guestbook is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = PHP-Update 2.7; my $type = Remote Code Execution; my $author = undefined1; my $date =...

SuperH (sh4) Add root user with password

No description provided by source. / Title: Linux/SuperH - sh4 - add root user with password - 143 bytes Date: 2011-06-23 Tested on: debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @jonathansalwan http://shell-storm.org Informations: ------------- - user: shell-storm - pswd: toor -...