CVE-2015-1559

Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...

CVE-2014-8802

The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to 1 add a user by uploading a crafted CSV file or 2 activate a user account via a verifyit action...

PT-2015-4082

Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 2.0.14 Description The issue allows remote attackers to add a user by uploading a crafted CSV file or activate a user account via a verifyit action due to improper access restriction to certain functions i...

Dell iDRAC IPMI 1.5 Insufficient Session ID Randomness

""" For testing purposes only. c Yong Chuan, Koh 2014 """ from time import sleep from socket import from struct import from random import import sys, os, argparse HOST = None PORT = 623 bufsize = 1024 recv = "" create socket UDPsock = socketAFINET,SOCKDGRAM UDPsock.settimeout2 data = 21 offset of...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 activate or 2 deactivate the plugin via the active parameter to wp-admin/edit-comments.php, 3...

CMS Mini 0.2.2 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------ Exploit Title: CMSMini - Multiple Vulnerability Author: SANTHO @s4n7h0 Vendor Homepage: http://sourceforge.net/projects/cmsmini/ Download link:...

CVE-2012-4102: Improper Input Validation

The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600...

OPC UA Activate Session Response Command

...

OPC UA Activate Session Request Command

...

win32/xp sp3 Activate Guest Account Shellcode 67 Bytes

Exploit Title: win32/xp sp3 Activate Guest Account Shellcode 67 Bytes + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : win32-Shellcodes + Tested on : Windows Xp 32 bit 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

JobHut 1.2 Remote Password Change/Delete/Activate User Vulnerability

Exploit for unknown platform in category web applications ==================================================================== JobHut 1.2 Remote Password Change/Delete/Activate User Vulnerability ====================================================================...

Family Connection 1.8.1 SQL Injection

Salvatore "drosophila" Fresta + Application: Family Connection + Version: 1.8.1 + Website: http://www.familycms.com + Bugs: A Multiple SQL Injection B Create Admin User C Blind SQL Injection + Exploitation: Remote + Date: 25 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author:...

CVE-2008-6506: Undefined Security Weakness

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors...

Microsoft“blocked”online update our“hack”to have surgery-vulnerability warning-the black bar safety net

The Microsoft Windows System vulnerability frequently, in order for the majority of users“responsible for”, Microsoft provide website, online patch update. Who want to make their computer more secure some? Thus are pleased to accept this“free lunch.” But recently found that the update is...