SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload

Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5 Date: 2013-08-17 Discovered by: Wesley Henrique Leite aka "spyk2r" Vendor Homepage: http://webhive.com.ua/ Software Link: http://webhive.com.ua/store/product.php?idproduct=46 Version: plugin Timeline 4.2.5p9 fo...

Online payment logic vulnerabilities summary-vulnerability warning-the black bar safety net

0×0 0 background description With Internet users increasingly accustomed to Online Shopping, there has been more and more e-Commerce sites, the online trading platform. Which certainly relates to the online payment process, and there is also a lot of logic. Since this involves money, if poorly...

Google Chrome Multiple Vulnerabilities-01 July13 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01jul13win.nasl 6115 2017-05-12 09:03:25Z teissa $ Google Chrome Multiple Vulnerabilities-01 July13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013...

GroundWork Monitor Enterprise Detection

The remote host has a version of GroundWork Monitor Enterprise installed. GroundWork Monitor Enterprise is a network application and cloud monitoring application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67017; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25...

PHP-Charts 1.0 - index.php?type Remote Code Execution

PHP-Charts 1.0 - index.php?type Remote Code Execution !/usr/bin/python Original Advisory came from: http://packetstormsecurity.com/files/119582/PHP-Charts-1.0-Code-Execution.html infodox - insecurety.net import requests import random import threading import sys def genpayloadhost, port: """ Perl...

Debian Security Advisory DSA 2714-1 (kfreebsd-9 - programming error)

Konstantin Belousov and Alan Cox discovered that insufficient permission checks in the memory management of the FreeBSD kernel could lead to privilege escalation. OpenVAS Vulnerability Test $Id: deb2714.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2714-1 using nvtgen...

Symantec Endpoint Protection Manager/Protection Center 12.x Buffer Overflow

SUMMARY A dynamic link library dll in the Symantec Endpoint Protection Manager SEPM 12.1.x server and Symantec Protection Center SPC 12.0.x Small Business Edition server does not properly validate all external input. This could potentially result in a buffer overflow and remote code execution wit...

Debian Security Advisory DSA 2698-1 (tiff - buffer overflow)

Multiple issues were discovered in the TIFF tools, a set of utilities for TIFF image file manipulation and conversion. CVE-2013-1960 Emmanuel Bouillon discovered a heap-based buffer overflow in the tpprocessjpegstrip function in the tiff2pdf tool. This could potentially lead to a crash or arbitra...

Havalite CMS 1.1.7 - Unrestricted Arbitrary File Upload

Havalite CMS 1.1.7 - Unrestricted Arbitrary File Upload ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit...

[pweb-suite] Perl based web application penetration testing tools

Written completely in Perl, this suite of tools covers a lot of the basics for penetration testing and vulnerability detection automation. This Suite formerly known as the "pCrack Suite" of tools is used primarily or web application vulnerability testing. xssPlay in Action! YouTube Download...

buffer_overflow

This plugin finds buffer overflow vulnerabilities. Users have to know that detecting a buffer overflow vulnerability will be only possible if the server is configured to return errors, and the application is developed in cgi-c or some other language that allows the programmer to do their own memo...

response_splitting

This plugin will find response splitting vulnerabilities. The detection is done by sending "w3af\r\nVulnerable: Yes" to every injection point, and reading the response headers searching for a header with name "Vulnerable" and value "Yes". Plugin type Audit Options This plugin doesnt have any user...

global_redirect

This plugin finds global redirection vulnerabilities. This kind of bugs are used for phishing and other identity theft attacks. A common example of a global redirection would be a script that takes a "url" parameter and when requesting this page, a HTTP 302 message with the location header to the...

format_string

This plugin finds format string bugs. Users have to know that detecting a format string vulnerability will be only possible if the server is configured to return errors, and the application is developed in cgi-c or some other language that allows the programmer to do this kind of mistakes. Plugin...

PT-2013-59: XML External Entities Injection in Huawei M2000

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Huawei M2000. An XML document may contain a Document Type Definition that, among other features, allows the definition of external entities. A malicious user may perform attacks aimed...

Debian Security Advisory DSA 2692-1 (libxxf86vm - several vulnerabilities)

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...

PT-2013-52: XML External Entities Injection in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Huawei SGSN USN9810. An XML document may contain a Document Type Definition that, among other features, allows the definition of external entities. A malicious user may perform attack...

Debian Security Advisory DSA 2663-1 (tinc - stack based buffer overflow)

Martin Schobert discovered a stack-based vulnerability in tinc, a Virtual Private Network VPN daemon. When packets are forwarded via TCP, packet length is not checked against the stack buffer length. Authenticated peers could use this to crash the tinc daemon and maybe execute arbitrary code. Not...

Debian Security Advisory DSA 2655-1 (rails - several vulnerabilities)

Several cross-site-scripting and denial of service vulnerabilities were discovered in Ruby on Rails, a Ruby framework for web application development. OpenVAS Vulnerability Test $Id: deb2655.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2655-1 using nvtgen 1.0 Script...

PT-2013-23: Sensitive Information Disclosure in SAP NetWeaver

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in SAP NetWeaver. Thus, obtaining access to the SAP server access to the table RSECTAB is required, an attacker can retrieve passwords to access other SAP systems, for which RFC...