4732 matches found
WordPress Search And Share 0.9.3 Cross Site Scripting Vulnerability
WordPress Search and Share plugin versions 0.9.3 and below suffer from cross site scripting and path disclosure vulnerabilities. I want to inform you about vulnerabilities in Search and Share plugin for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS...
WordPress Search And Share 0.9.3 Cross Site Scripting
Hello list! I want to inform you about vulnerabilities in Search and Share plugin for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS holes are in ZeroClipboard.swf, which is used in the plugin. In February I've wrote about Cross-Site Scripting...
Microsoft Fix It a Temporary Patch for IE 8 Zero Day Flaw
Microsoft has released a Fix-It to address an Internet Explorer 8 zero-day that was exploited in a watering hole attack against the U.S. Department of Labor website last week. The Fix It is a temporary mitigation until a patch is released. Microsoft’s next scheduled Patch Tuesday security updates...
SRPLab Personal File Share buffer overflow
Buffer overflow on oversized request in HTTP server...
Personal File Share HTTP Server Remote Overflow Vulnerability
Title: Personal File Share HTTP Server Remote Overflow Vulnerability Software : Personal File Share HTTP Server Software Version : UNKNOWN Vendor: http://www.srplab.com/ Vulnerability Published : 2013-04-28 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...
Personal File Share HTTP Server Remote Overflow
Title: Personal File Share HTTP Server Remote Overflow Vulnerability Software : Personal File Share HTTP Server Software Version : UNKNOWN Vendor: http://www.srplab.com/ Vulnerability Published : 2013-04-28 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...
Samba limitations bypass
It's possible o bypass share attributes limitations...
Ubuntu Update for samba USN-1802-1
Check for the Version of samba OpenVAS Vulnerability Test $Id: gbubuntuUSN18021.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for samba USN-1802-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
Personal File Share 1.0 DoS
Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Personal File Share 1.0 DoS Date: 2nd April 2013 Exploit Author: npn Vendor Homepage: http://www.srplab.com/ Software Link: http://download.cnet.com/Personal-File-Share/3000-185064-75893424.html Version: 1.0 Tested...
Personal File Share 1.0 - Denial of Service
Personal File Share 1.0 - Denial of Service !/usr/bin/python Exploit Title: Personal File Share 1.0 DoS Date: 2nd April 2013 Exploit Author: npn Vendor Homepage: http://www.srplab.com/ Software Link: http://download.cnet.com/Personal-File-Share/3000-185064-75893424.html Version: 1.0 Tested on:...
Personal File Share 1.0 - Denial of Service
!/usr/bin/python Exploit Title: Personal File Share 1.0 DoS Date: 2nd April 2013 Exploit Author: npn Vendor Homepage: http://www.srplab.com/ Software Link: http://download.cnet.com/Personal-File-Share/3000-185064-75893424.html Version: 1.0 Tested on: Windows XP SP3 English import socket, sys sock...
A writable configured share might get read only
Description Due to a assignment vs equality bug a share reference might get overwritten. This can lead to 'read only = no' from another share to leak into a 'read only = yes' share for a subsequent connections. This is a re-evaluation of an already fixed bug. Workaround Update to 3.6.6 and higher...
CVE-2013-0454
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to 1 write to a read-only share; 2 trigger...
CVE-2013-0454
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to 1 write to a read-only share; 2 trigger...
DEBIAN-CVE-2013-0454
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to 1 write to a read-only share; 2 trigger...
Design/Logic Flaw
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to 1 write to a read-only share; 2 trigger...
CVE-2013-0454
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to 1 write to a read-only share; 2 trigger...
Cunity 1.0b - XSS/FileUpload Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Multiple XSS vulnerabilities - ownCloud
Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.8 and all prior versions except 4.0.x allow remote attackers to inject arbitrary web script or HTML via the "quota" POST parameter to setquota.php in /core/settings/ajax/ Commits: 2364c79 stable45 Risk: Low Note: Successful...
Threats and Market Share Increase for Android, Decrease for Symbian
No real surprise that F-Secure’s fourth quarter threat report further accentuated the all-but-definite-reality that there is a direct correlation between a platform’s market share and the volume of threats targeting it. “As its market share declines,“ F-Secure researchers reasoned, “so does malwa...