Unspecified Vulnerability in libimobiledevice and libusbmuxd

libimobiledevice is a software protocol library and tool that enables Linux support for connecting to iOS devices such as the iPhone, iPodTouch, etc. libusbmuxd is a client library for connecting to iOS devices. An unspecified vulnerability exists in libimobiledevice and libusbmuxd, which arises...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of the ASN.1 library OpenSSL implementation arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure such as out-of-buffer or memory corruption by using a special data sequence in the ANY structu...

LebiShop Mall Backend Catalog Traversal Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The mall system's management background provides a system template management function , the function in the system template to browse files related to...

UBUNTU-CVE-2016-2108

The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service buffer underflow and memory corruption via an ANY field in crafted serialized data, aka the "negative zero" issue...

PT-2016-1843

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1o OpenSSL versions prior to 1.0.2c Description The issue is caused by a buffer overflow in the ASN.1 implementation, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to modify files of any type.

The vulnerability of Advantech WebAccess remote monitoring software lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to modify files of any type remotely...

Cisco Wireless LAN Controller RADIUS Implementation Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller product. The RADIUS implementation in Cisco Wireless LAN Controller fails to perform sufficient input validation on RADIUS Disconnect-Request packets, allowing remote attackers to exploit a vulnerability by submitting a special request to...

Resource Data Management Elevation of Privilege Vulnerability

Resource Data Management is a Web-based SCADA monitoring system. An elevation of privilege vulnerability exists in the implementation of Resource Data Management. An attacker can exploit this vulnerability to elevate privileges and change the password of any user...

BlueLine Intelligent Collaboration Platform EIS File Containment Vulnerability

BlueLine Intelligent Collaboration Platform EIS is an oa system based on asp.net and SharePoint, which is widely used in various industries. An arbitrary file download vulnerability exists in EIS of BlueLine Intelligent Collaboration Platform. Because the Project/ProjectInfo/DownLoad.aspx page...

BOA Web Server 0.94.8.2 - Arbitrary File Access Vulnerability

Exploit for linux platform in category web applications Title: Vulnerability in BOA web server v0.94.8.2 Date: 03/10/2000 Status: Vendor contacted, patch available Scope: Arbitrary file access Author: llmora Release: Public S 2 1 S E C http://www.s21sec.com Vulnerability in BOA web server v0.94.8...

Fedora 22 : ettercap-0.8.2-1.fc22 (2015-4009)

0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...

IBM Rational Jazz Team Server Arbitrary User Dashboard Deletion Vulnerability

IBM Rational Jazz Team Server JTS is a set of U.S. IBM's Java collaboration platform based on the new generation of IBM Rational products. The platform is encapsulated as a Web archive file WAR file, along with Rational Team Concert 1.0 RTC1.0 with the release , can be deployed on the application...

ShareLaTeX Absolute Path Traversal Vulnerability

ShareLaTeX is an open source web-based real-time collaborative LaTex editor developed by the ShareLaTeX team, which supports local editing, real-time collaboration and compilation of LaTeX documents. An absolute path traversal vulnerability exists in ShareLaTeX 0.1.3 and earlier versions. When th...

nvSoft-Any-Video-Converter-4.3.6

Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows import os,shutil,time,sys def banner: print "\n\tAnvSoft Any Video Converter 4.3.6 Stack Overflow" print "\tbased on PO...

jetAudio 7.1.9.4030 plus vx - (.m3u) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...

AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow

No description provided by source. Title: ====== AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=492 VL-ID: ===== 492 Introduction: ============= An all-in-one user-friendly DVD ripper,...

Qualcomm Eudora 5.2.1/6.0 File Attachment Spoofing Variant Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7653/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into executing malicious conten...

AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow

No description provided by source. Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits:...

Snif 1.5.2 - Any Filetype Download Exploit

No description provided by source. -------------------------------------------- -: Snif - Any Filetype Download Exploit :- -------------------------------------------- Script : Snif - Simple And Nice Index File Version : 1.5.2 possibly lower versions too Found By : Aodrulez. Email :...

WordPress Any Font Plugin <= 2.2.3 - XSS

Because of this vulnerability in mceanyfont/dialog.php, the attackers can inject arbitrary web script or HTML via the "text" parameter. Solution Update the plugin...