PT-2017-13211

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions 11.3.03 and prior Description An issue with improper access control was found, allowing a local, non-administrator user to have privileges to read and write to the file system of the target machine. Recommendations F...

Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File

Exploit for php platform in category web applications arbitrary write file // Date: 18/05/206 // Exploit Author: agix discovered by NETANEL RUBIN // Vendor Homepage: https://magento.com // Version: /shipping-information // in the response check the payment method it may vary from checkmo // // If...

Adcon Telemetry A840 Telemetry Gateway Hardcoded Certificate Vulnerability

The Adcon Telemetry A840 Telemetry Gateway is the A840 series of gateway products from Adcon Telemetry, Germany. The Adcon Telemetry A840 Telemetry Gateway uses hard-coded certificates, which allows remote attackers to exploit the vulnerability to change the device configuration and read or write...

UBUNTU-CVE-2015-7703

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...

Microsoft Graphics Device Interface Integer Overflow - Ver2 (CVE-2013-3940)

An integer overflow vulnerability has been reported in the way that the Windows Graphics Device Interface GDI processes specially crafted image files. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted Windows Write file. Successful exploitation of this...

XAMPP 1.8.x Multiple Vulnerabilities

Exploit for multiple platform in category remote exploits Exploit Name : XAMPP 1.8.x Multiple Vulnerabilities Author : DevilScreaM Date : 6 October 2014 Vendor : http://bitnami.com Version : 1.8.x or Higher Version Operating System : Windows / Linux Vulnerability : Cross Site Scripting / Write Fi...

7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities

No description provided by source. $Id: igss9misc.rb 12779 2011-05-31 14:33:19Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Non Compliant Scada Modbus Write File Record

...

Java write file file name 0 0 truncation BUG that caused file upload vulnerability and fix-vulnerability warning-the black bar safety net

Java in the above two environments to write the files, because 0 0 is truncated and not correct for the new generated file name. For example, the user needs to username abc. jsp . jpg, but after 0 0 after truncation, the resulting file name becomes the abc. jsp , therefore we are in relation to t...

WinTFTP Server Pro v3.1 (0day) Remote Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ======================================================================= WinTFTP Server Pro v3.1 0day Remote Directory Traversal Vulnerability ======================================================================= / / / / / // | / // \ | / ...

AT-TFTP Server 1.8 - Directory Traversal

AT-TFTP Server 1.8 - Directory Traversal / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,tftp Transfers files to and from a remote computer running the TFTP service. TFTP -i host GET | PUT source destination -i Specifies binary image transfer mode also called octet. In...

Microsoft Internet Explorer vbDevKit.dll Code Execution

IE vbDevKit.dll ActiveX Control Multti Remote Code Execution +Date : 22 January 2010 +version : all versions +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN +Reference : http://downloads.securityfocus.com/vulnerabilities/exploits/35725.pl +1...

e107fmpro-upload.txt

| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | e107 Plugin fm pro v1 Multiple Remote Vulnerabilities I- Remote File Disclosure / Write File /e107plugins/fmprov1/fmp.php?fmdir=&fmaction=confirmeditfile&fmfilename=File II-...

e107 plugin fm pro 1 - File Disclosure Arbitrary File Upload Directory Traversal

e107 plugin fm pro 1 - File Disclosure Arbitrary File Upload Directory Traversal | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | e107 Plugin fm pro v1 Multiple Remote Vulnerabilities I- Remote File Disclosure / Write File...