7415 matches found
verlihub <= 0.9.8d-RC2 Remote Command Execution Vulnerability
No description provided by source. == verlihub =0.9.8d-RC2 remote r00t / command execution ======================= | ' / | / / \---'-|---\ | |' / / / '. V ,--' ':./ description:-------------------------------------------------------------------- Verlihub is a Direct Connect protocol server; runs...
ThWboard <= 3.0b2.84-php5 SQL Injection / Code Execution Exploit
No description provided by source. ?php printr' ----------------------------------------------------------------------------- ThWboard =3.0 beta 2.84-php5 boardstyleid sql injection / cmd exec exploit by rgod dork: powered by ThWboard version specific: powered by ThWboard 3 Beta 2.84-php5 by...
PHP CGI Argument Injection
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...
Mozilla Firefox 2.0.0.2 Document.Cookie Path Argument Denial of Service Vulnerability
No description provided by source...
Taylor UUCP 1.0.6 Argument Handling Privilege Elevation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3312/info Taylor UUCP is an implementation of the UUCP package written originally by Ian Lance Taylor. A problem has been discovered in Taylor UUCP that makes it possible for local users to gain elevated privileges. The...
PPLive <= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln
No description provided by source. -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers /LoadModule remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------...
EZ Server 1.0 Long Argument Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7243/info It has been reported that the EZ Server software does not sufficiently handle strings of excessive length in some circumstances. Because of this, a remote attacker may be able to deny service to legitimate users...
Inktomi Traffic Server 4/5 Traffic_Manager Path Argument Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/5098/info Inktomi Traffic Server is a transparent web caching application. It is designed for use with Unix and Linux variants as well as Microsoft Windows operating environments. A buffer overflow vulnerability has been...
Constructr CMS 3.03 Arbitrary File Upload
No description provided by source. !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and...
PHD Help Desk 2.12 - SQL Injection Vulnerability
No description provided by source. Exploit Title: PHD Help Desk 2.12 SQLi Date: 05/24/2013 Exploit Author: drone @dronesec More information: http://forelsec.blogspot.com/2013/06/phd-help-desk-212-sqli-and-xss.html Vendor Homepage: http://www.p-hd.com.ar/ Software Link:...
GNU Info 4.7 Follow XRef Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info command. An...
PHP <= 5.2.6 - chdir Function http URL Argument safe_mode Restriction Bypass
No description provided by source. source: http://www.securityfocus.com/bid/29796/info PHP is prone to multiple 'safemode' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to determine the presence of files in unauthorized locations; other attacks are also possible...
Microsoft Internet Explorer and Mozilla Firefox URI Handler Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24837/info Microsoft Internet Explorer, Mozilla Firefox and Netscape Navigator are prone to a vulnerability that lets attackers inject commands through the 'firefoxurl' and 'navigatorurl' protocol handlers. Exploiting the...
4Images <= 1.7.1 (Local Inclusion) Remote Code Execution Exploit
No description provided by source. ?php ----4images171inclxpl.php 6.45 26/02/2006 4Images = 1.7.1 remote commands execution through arbitrary local inclusion coded by rgod site: http://retrogod.altervista.org - this works regardless of magicquotesgpc settings Sun-Tzu: Having doomed spies, doing...
Sun Java Web Start Plugin Command Line Argument Injection (2012)
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Symantec Multiple Products SPBBCDrv Driver Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23241/info Multiple Symantec products are prone to a local denial-of-service vulnerability. This issue occurs when attackers supply invalid argument values to the 'SPBBCDrv.sys' driver. A local attacker may exploit this...
OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402...
DEBIAN-CVE-2014-3469
The 1 asn1readvaluetype and 2 asn1readvalue functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via a NULL value in an ivalue argument...
Null pointer dereference
The 1 asn1readvaluetype and 2 asn1readvalue functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via a NULL value in an ivalue argument...
libtasn1: asn1_read_value_type() NULL pointer dereference
The 1 asn1readvaluetype and 2 asn1readvalue functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via a NULL value in an ivalue argument...