Media Player Classic XSS / Denial Of Service

MPC Media Player Classic suffers from cross site scripting and denial of service vulnerabilities. ========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities...

MPC (Media Player Classic) XSS / Denial Of Service

========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities ==========================================================================================...

Skype Account Service - Session Token Bypass Vulnerability

Document Title: =============== Skype Account Service - Session Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=762 http://www.vulnerability-lab.com/getcontent.php?id=739 MSRC ID: 13175 Release Date: ============= 2012-11-14...

Invision IP.Board 3.3.4 unserialize() PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/phpexe' class Metasploit3...

Invision Power Board <= 3.3.4 unserialize() PHP Code Execution (2)

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ Original:...

Invision IP.Board unserialize() PHP Code Execution

This module exploits a php unserialize vulnerability in Invision IP.Board 'Invision IP.Board unserialize PHP Code Execution', 'Description' = %q This module exploits a php unserialize vulnerability in Invision IP.Board = 3.3.4 which could be abused to allow unauthenticated users to execute...

SugarCRM unserialize() PHP Code Execution

This module exploits a php unserialize vulnerability in SugarCRM 'SugarCRM unserialize PHP Code Execution', 'Description' = %q This module exploits a php unserialize vulnerability in SugarCRM = 6.3.1 which could be abused to allow authenticated SugarCRM users to execute arbitrary code with the...

Avaya IP Office Customer Call Reporter ImageUpload.ashx file upload

Added: 10/22/2012 CVE: CVE-2012-3811 BID: 54225 OSVDB: 83399 Background Avaya IP Office is a unified communications solution for mobile workforce. Problem The ImageUpload.ashx script allows unauthenticated users to upload arbitrary script files to the webserver. The script files can then be...

Avaya IP Office Customer Call Reporter ImageUpload.ashx file upload

Added: 10/22/2012 CVE: CVE-2012-3811 BID: 54225 OSVDB: 83399 Background Avaya IP Office is a unified communications solution for mobile workforce. Problem The ImageUpload.ashx script allows unauthenticated users to upload arbitrary script files to the webserver. The script files can then be...

Avaya IP Office Customer Call Reporter ImageUpload.ashx file upload

Added: 10/22/2012 CVE: CVE-2012-3811 BID: 54225 OSVDB: 83399 Background Avaya IP Office is a unified communications solution for mobile workforce. Problem The ImageUpload.ashx script allows unauthenticated users to upload arbitrary script files to the webserver. The script files can then be...

Avaya IP Office Customer Call Reporter ImageUpload.ashx file upload

Added: 10/22/2012 CVE: CVE-2012-3811 BID: 54225 OSVDB: 83399 Background Avaya IP Office is a unified communications solution for mobile workforce. Problem The ImageUpload.ashx script allows unauthenticated users to upload arbitrary script files to the webserver. The script files can then be...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

Directory traversal

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

CVE-2012-5344

CVE-2012-5344 affects IpTools’ Tiny TCP/IP Server (IpTools WebServer/Thttpd.bat 0.1.4). The connected data confirms a directory traversal vulnerability that allows remote reading of arbitrary files via a .. in an HTTP request. OpenVAS entries also reference a related remote buffer overflow for Ip...

PowerTCP WebServer for - ActiveX Denial of Service

PowerTCP WebServer for - ActiveX Denial of Service source: https://www.securityfocus.com/bid/55761/info PowerTCP WebServer for ActiveX is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application typically Internet Explorer, denying service to...

PowerTCP WebServer for - ActiveX Denial of Service

source: https://www.securityfocus.com/bid/55761/info PowerTCP WebServer for ActiveX is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application typically Internet Explorer, denying service to legitimate users. PowerTCP WebServer for ActiveX 1.9....

Researcher Finds 100k IEEE.org Passwords Stored in Plain-Text on Public FTP Server

A Romanian computer scientist discovered that the Institute of Electrical and Electronics Engineers IEEE was storing its members’ usernames and passwords in plaint-text on a publically accessible file transfer protocol FTP server. Radu Drăgușin claims the collection of nearly 100,000 credentials...

HTTP Client Automatic Exploiter

This module has three actions. The first and the default is 'WebServer' which uses a combination of client-side and server-side techniques to fingerprint HTTP clients and then automatically exploit them. Next is 'DefangedDetection' which does only the fingerprinting part. Lastly, 'list' simply...

Apache Struts 2 - Skill Name Remote Code Execution

Apache Struts 2 - Skill Name Remote Code Execution source: https://www.securityfocus.com/bid/55165/info Apache Struts2 is prone to a remote-code-execution vulnerability because it fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary code in the...