6548 matches found
CVE-2014-3620
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain...
CVE-2014-5720
The CVE-2014-5720 entry covers the Android app Bike Race Free - Top Free Game (package com.topfreegames.bikeracefreeworld), version 4.3, which does not verify X.509 certificates from SSL servers. This improper certificate validation enables man-in-the-middle attackers to spoof servers and obtain ...
CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected
Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source. A flaw was found in the way Bundler handled gems available from multiple sources. An attacker with access...
Top Quark Architecture 2.1.0 - lib/js/fancyupload/showcase/batch/script.php File Upload PHP Code Execution
The Top Quark Architecture WordPress plugin was affected by a lib/js/fancyupload/showcase/batch/script.php File Upload PHP Code Execution security vulnerability...
FuckShitUp - Multi Vulnerabilities Scanner written in PHP
Basically, FSU is bunch of tools written in PHP-CLI. Using build-in functions, you are able to grab url's using search engines - and so, dork for interesting files and full path disclosures. Using list of url's, scanner will look for Cross Site Scripting, Remote File Inclusion, SQL Injection and...
Debian GNU/Linux 3.1 top Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1895/info top is a program used to display system usage statistics in real time written by GoupSys Consulting but shipped by default as a core component with many operating systems. On BSD systems, top is installed setgid...
Prozilla Top 100 1.2 - Arbitrary Delete Stats Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered...
Best Top List 2.11 - Upload Shell Vulnerability
No description provided by source...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Security Vulnerabilities
No description provided by source. ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES...
Wordpress Top Quark Architecture 2.10 - Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: Wordpress Top Quark Architecture Version 2.10 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/topquark/lib/js/fancyupload/showcase/batch/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://topquark.com/ Software...
Enigma2 Webinterface 1.7.x 1.6.x 1.5.x (linux) Remote File Disclosure
No description provided by source. !/usr/bin/perl Enigma2 Webinterface 1.7.x 1.6.x 1.5.x remote root file disclosure exploit Author: Todor Donev Email me: todor.donev@@gmail.com Platform: Linux Type: remote Gewgle Dork: Enigma2 movielist filetype:rss Enigma2 is a framebuffer-based zapping...
Scripts Genie Top Sites (out.php, id param) - SQL Injection Vulnerability
No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Top Sites Script, SQL Injection Vulnerabilities Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=topsitescript...
Top Sites Script SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Top Sites SQL Vulnerable Vendor url:http://getaphpsite.com Version:...
DB Top Sites 1.0 - Remote Command Execution Exploit
No description provided by source. ?php / ------------------------------------------------------------ + About DB Top Sites v1.0 Remote Command Execution Exploit Script homepage : http://www.jnmsolutions.co.uk/topsites/ Author : SirGod Thanks to : Nytro Website : www.mortal-team.org...
FreeBSD 3.5/4.x top Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1895/info top is a program used to display system usage statistics in real time written by GoupSys Consulting but shipped by default as a core component with many operating systems. On BSD systems, top is installed setgid...
Invision Power Top Site List 1.0/1.1 Comments function id Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9945/info It has been reported that Top Site List may be prone to an SQL injection vulnerability that may allow remote attackers to pass malicious input to database queries, resulting in modification of query logic or oth...
Monster Top List 1.4 Functions.PHP Remote File Include Vulnerability
No description provided by source...
Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit
No description provided by source. !/usr/bin/perl Monster Top List = 1.4.2 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://www.monstertoplist.com Exploit: http://site.com/path/sources/functions.php?rootpath=EvilScript coded and f0und3d by fluffybunny Romania...
DreamBox DM800 Arbitrary File Download Vulnerability
No description provided by source. Exploit Title: title Date: date Author: ShellVision Version: dm800 = 1.6rc3 Tested on: dm800 Release 4.6.0 2009-12-24 DreamBox DM800 Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Affected...
