CVE-2016-3444

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2, 14.0, 14.1, and 15.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...

CVE-2016-1348

Summary of the CVE-2016-1348 issue : Cisco IOS and IOS XE DHCPv6 Relay Denial of Service vulnerability arises from insufficient validation of DHCPv6 relay messages. An unauthenticated, remote attacker can trigger a device reload, leading to a DoS condition. Affected software includes Cisco IOS 15...

Cetera eCommerce 15.0 SQL Injection / Disclosure

Hello list! I want to warn you about SQL Injection, Full path disclosure, Abuse of Functionality and Insufficient Anti-automation vulnerabilities in Cetera eCommerce. It's engine for online shops. ------------------------- Affected products: ------------------------- Vulnerable are Cetera eCommer...

Cetera eCommerce - Multiple Cross-Site Scripting SQL Injections

Cetera eCommerce - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Code injection

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/...

WinZip 15.0 - WZFLDVW.OCX IconIndex Property Denial of Service

WinZip 15.0 - WZFLDVW.OCX IconIndex Property Denial of Service Exploit Title: Winzip WZFLDVW.OCX IconIndex property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website :...

Winzip 15.0 WZFLDVW.OCX IconIndex Property Denial Of Service

Exploit Title: Winzip WZFLDVW.OCX IconIndex property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...