3649 matches found
SunellSecurity NVR / Camera - Denial Of Service
Exploit for hardware platform in category dos / poc Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web servic...
SunellSecurity NVR Camera - Denial of Service
SunellSecurity NVR Camera - Denial of Service Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web service buff...
SunellSecurity NVR / Camera 1.6.08-09 / 2.0.06-08 Denial Of Service
Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web service buffer overflow and leading to a stop web service,...
SunellSecurity NVR / Camera - Denial of Service
Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web service buffer overflow and leading to a stop web service,...
Magento Community Edition < 1.9.2.3 Multiple Vulnerabilities
Binary data 9679.prm...
WSSAT - Web Service Security Assessment Tool
WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it performs both static and dynamic tests again...
[SECURITY] Fedora 25 Update: openvas-gsa-6.0.11-3.fc25
The Greenbone Security Assistant GSA is a lean web service offering a user web interface for the Open Vulnerability Assessment System OpenVAS. The GSA uses XSL transformation style-sheets that converts OMP responses from the OpenVAS infrastructure into presentable HTML...
SQL Injection Vulnerability in UFIDA Financials /target/services/userInfoWeb?wsdl Page
UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/userInfoWeb?wsdl page. An attacker can exploit the vulnerability to obtain database information...
SQL Injection Vulnerability in UFIDA Financials /target/services/operOriztion?wsdl Page
UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/operOriztion?wsdl page. An attacker can exploit the vulnerability to obtain database information...
Atlassian Confluence arbitrary file include Vulnerability (CVE-2015-8399)
Affect the Assembly: Atlassian Confluence Atlassian Confluence is less than 5. 8. 17 versions of the service exist in the arbitrary file read and directory traversal vulnerabilities /spaces/viewdefaultdecorator. action? decoratorName=. Lists the current directory /spaces/viewdefaultdecorator...
moodle -- multiple vulnerabilities
Marina Glancy reports: MSA-16-0022: Web service tokens should be invalidated when the user password is changed or forced to be changed...
CVE-2016-6898
XML external entity XXE vulnerability in the Hyper Management Module HMM in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service web service outage via a crafted XML document...
CVE-2016-6898
CVE-2016-6898 affects Huawei E9000 rack servers’ Hyper Management Module (HMM). A XML External Entity (XXE) vulnerability exists in user-supplied XML documents, allowing remote authenticated users to read arbitrary files or cause a web service denial of service. Impact is described as partial con...
PT-2016-7156
Name of the Vulnerable Software and Affected Versions Huawei E9000 rack servers with software before V100R001C00SPC296 Description The issue is related to an XML external entity XXE vulnerability in the Hyper Management Module HMM. This allows remote authenticated users to read arbitrary files or...
Kaspersky Company Account - Response XSS Vulnerability
Document Title: =============== Kaspersky Company Account - Response XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1934 Video: https://www.vulnerability-lab.com/getcontent.php?id=1977 Release Date: ============= 2016-08-28...
jenkins: Remote code execution through remote API (SECURITY-247)
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando...
Omron CP1H web service buffer overflow vulnerability
CP1H is a mainstream PLC from Omron, and its Ethernet port is open for web service, supporting http protocol communication, which allows you to access and set the configuration information of the device by logging into the web server. A buffer overflow vulnerability exists when injecting a...
Mitsubishi LJ71E71-100-CM Communication Module Web Services Buffer Overflow Vulnerability
Mitsubishi L06 is a high-end PLC of Mitsubishi, its Ethernet communication module LJ71E71-100-CM is open to web service, support http protocol communication, you can access and set the configuration information of the device by logging into the web server. In the HTTP message sent to the...
SQL Injection, Remote Command Execution Vulnerabilities Exist in Kinglion Technologies Call System
Jinlun Technology Call System is a set of intelligent telemarketing management system specially designed by Shenzhen Jinlun Communication Co. Jinlun call system exists SQL injection, remote command execution vulnerability, due to SOAP interface external entity injection and the use of Think php...