Easy File Management Web Server 5.6 Buffer Overflow

!/usr/bin/python Exploit Title: Easy File Management Web Server v5.6 - USERID Remote Buffer Overflow Version: 5.6 Date: 2015-08-17 Author: Tracy Turben [email protected] Software Link: http://www.efssoft.com/ Tested on: Win7x32-EN Special Thanks To: Julien Ahrens for the crafted jmp esp Trick...

Oracle MySQL 5.6.x < 5.6.24 Multiple Vulnerabilities (July 2015 CPU) (October 2015 CPU)

The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.24. It is, therefore, affected by the following vulnerabilities : - Multiple information disclosure vulnerabilities exist in the following subcomponents which can be exploited by an authenticated, remote attacker to ga...

PHP 5.6.x < 5.6.12 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.12. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in file spldllist.c due to improper sanitization of input to the unserialize function. An attacker can...

OpenBSD 5.6 - Multiple Local Kernel Panics (Denial of Service)

OpenBSD 5.6 - Multiple Local Kernel Panics Denial of Service / Exploit Title: OpenBSD include include include include include include ifndef OpenBSD error "Not OpenBSD !!!1111"; else include endif ifndef i386 error "Not i386 !!!1111"; endif char bigb00bz = "...

OpenBSD 5.6 - Multiple Local Kernel Panics (Denial of Service)

/ Exploit Title: OpenBSD include include include include include include ifndef OpenBSD error "Not OpenBSD !!!1111"; else include endif ifndef i386 error "Not i386 !!!1111"; endif char bigb00bz = " 8M:::::::8888M:::::888:::::::88:::8888888::::::::Mm\n" "...

PHP 5.6.x < 5.6.1 'add_post_var' Code Execution

According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.1. It is, therefore, affected by errors related to the function 'addpostvar' within file 'posthandler.c', the input filters, and the 'efree' function. Input filters that free the 'ksep' variable can als...

BMForum 5.6 - newtem/header/bsd01header.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...

Design/Logic Flaw

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts...

PT-2013-4632 · Mysql Server +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.31 and earlier MySQL Server versions 5.6.11 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to Data Manipulatio...

Oracle MySQL Server 5.6.x < 5.6.11 Multiple Vulnerabilities

Binary data 6768.prm...

Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability

This host is installed with Citrix Provisioning Services and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbcitrixprovisioningservicessoapserverbofvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ Citrix Provisioning Services SoapServer Buffer Overflow Vulnerability...

MySQL Authentication Bypass Password Dump

This module exploits a password bypass vulnerability in MySQL in order to extract the usernames and encrypted password hashes from a MySQL server. These hashes are stored as loot for later cracking. Impacts MySQL versions: - 5.1.x before 5.1.63 - 5.5.x before 5.5.24 - 5.6.x before 5.6.6 And Maria...

OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability

Checks whether OpenSSH is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenSSH Legacy Certificate Signing Information Disclosure Vulnerability

Checks whether OpenSSH is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to gain access to sensitive information; this may lead to further attacks. Versions 5.6 and 5.7 of OpenSSH are vulnerable. OpenVAS Vulnerability Test $Id: gbopenssh46155.nasl 7019...

PT-2009-4380 · Microsoft · Jscript

Name of the Vulnerable Software and Affected Versions: JScript scripting engine versions 5.1, 5.6, 5.7, and 5.8 Description: The issue is related to the improper loading of decoded scripts into memory before execution, which can lead to memory corruption. This can be exploited by remote attackers...

BMForum 5.6 (tagname) Remote SQL Injection Vulnerability

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

BMForum 5.6 (tagname) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== BMForum 5.6 tagname Remote SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

bmforum-sql.txt

Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Security update for (Jscript Version 5.6) for Windows 2000 (KB917344)

A security issue has been identified in the Windows Script Host that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...