1133 matches found
Snif 1.5.2 - Any Filetype Download Exploit
No description provided by source. -------------------------------------------- -: Snif - Any Filetype Download Exploit :- -------------------------------------------- Script : Snif - Simple And Nice Index File Version : 1.5.2 possibly lower versions too Found By : Aodrulez. Email :...
AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow
No description provided by source. Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits:...
Qualcomm Eudora 5.2.1/6.0 File Attachment Spoofing Variant Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7653/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into executing malicious conten...
WordPress Any Font Plugin <= 2.2.3 - XSS
Because of this vulnerability in mceanyfont/dialog.php, the attackers can inject arbitrary web script or HTML via the "text" parameter. Solution Update the plugin...
CVE-2014-2406
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges...
CVE-2014-2408
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."...
Design/Logic Flaw
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges...
Design/Logic Flaw
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."...
Cross site scripting
Cross-site scripting XSS vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4138
Cross-site scripting XSS vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors...
Dell.com Open Redirection
Title: Dell Open URL Redirection Vulnerability Status: Unfixed Severity: High Works on: Any browser with any version Homepage: www.Dell.com Author: GoMeR-12 Email: [email protected] Description: I have found Open URL Redirection Vulnerabilities in DEll 'sdialogs . ThisVulnerability is exploitable...
Microsoft DNS Server Validation Spoofing (MS09-008) - High Confidence (CVE-2009-0234)
A weakness exists in Microsoft DNS server implementation. The problem is caused by improper handling of negative results for DNS ANY queries. Remote attackers could exploit this vulnerability by sending numerous ANY queries to the target server, followed by malicious responses to the same server...
AIX 5.2 TL 0 : at (IZ43452)
The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root. The following file is vulnerable : /usr/bin/at. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...
Default application configuration files are available for download
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-27693. panel h3. Summary of The Bug By browsing to the following URL path user would be able to download any files under...
AnvSoft Any Video Conveter 4.3.6 Unicode Buffer Overflow
Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits: Vulnerability Research Laboratory Team...
AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow
Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/ http://www.vulnerability-lab.com/getcontent.php?id=492 Credits: Vulnerability Research Laboratory Team...
AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow
AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/...
AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow
AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by...
AnvSoft Any Video Converter 4.3.6 Stack Overflow
!/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by Vulnerability-Lab http://www.exploit-db.com/exploits/18717/...
AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow
!/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by Vulnerability-Lab http://www.exploit-db.com/exploits/18717/...