4582 matches found
Php Blue Dragon CMS <= 2.9.1 (XSS/SQL) Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
Powder Blue Design SQL Injection Vulnerability
No description provided by source. .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Powder Blue Desaign SQL Injection Vulnerability Vendor: http://www.powder-blue.com/ Discovered by : cyberlog Site : Sekuritionline.net Channel : SekuritiOnlin...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
Blue Utopia 'index.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33851/info Blue Utopia is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the...
Blue Eye CMS <= 1.0.0 (clanek) Blind SQL Injection Exploit
No description provided by source. --+++===============================================================+++-- --+++====== Blue Eye CMS = 1.0.0 Blind SQL Injection Exploit ======+++-- --+++===============================================================+++-- ?php function usage echo \n+ Blue Eye CMS...
NetPilot/Soho Blue Router 6.1.15 - Privilege Escalation
No description provided by source. pdf...
Php Blue Dragon CMS <= 2.9 - Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika...
Blue Coat Reporter Unauthenticated Directory Traversal
No description provided by source...
Windows 95/98,Windows NT Enterprise Server <= 4.0 SP5,Windows NT Terminal Server <= 4.0 SP4,Windows NT Workstation <= 4.0 SP5 (2)
No description provided by source. source: http://www.securityfocus.com/bid/514/info The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is received, the stack will sometimes fail with unpredictable results ranging from a Blue Screen ...
Blue Coat ProxySG 6.4.x OpenSSL Security Bypass
The remote Blue Coat ProxySG device's SGOS self-reported version is 6.4 prior to 6.4.6.4. It, therefore, contains a bundled version of OpenSSL that has multiple flaws, including an unspecified error that could allow an attacker to cause usage of weak keying material leading to simplified...
Blue Coat ProxySG 6.5.x Multiple OpenSSL Vulnerabilities
The remote Blue Coat ProxySG device's SGOS self-reported version is 6.5 prior to 6.5.4.4 and, therefore, contains a bundled version of OpenSSL that contains multiple flaws. It is, therefore, potentially affected by the following vulnerabilities : - An error exists in the function 'ssl3readbytes'...
Blue Coat ProxySG 6.2.x OpenSSL Security Bypass
The remote Blue Coat ProxySG device's SGOS self-reported version is 6.2 prior to 6.2.15.6. It, therefore, contains a bundled version of OpenSSL that has multiple flaws, meaning it is potentially affected by an unspecified error that could allow an attacker to cause usage of weak keying material...
Blue Coat ProxySG 4.x OpenSSL Security Bypass
The remote Blue Coat ProxySG device's SGOS self-reported version is 4.x and reportedly contains a bundled version of OpenSSL that has multiple flaws. It is, therefore, potentially affected by an unspecified error that could allow an attacker to cause usage of weak keying material, leading to...
HackerOne Bug Bounty Platform Lands Top Microsoft Security Expert
With bug bounties being all the rage, the platforms that support them are emerging as important pieces of the security research, disclosure and reward ecosystem. One of those platforms, HackerOne, has scored a major coup in hiring Katie Moussouris, the driving force behind Microsoft’s bounty...
Blue Coat ProxyAV 3.5.1.1 - 3.5.1.6 Heartbeat Information Disclosure (Heartbleed)
According to its self-reported version number, the firmware installed on the remote host is affected by an information disclosure vulnerability. An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbeat extensions that could allow an attacker to obtain...
CVE-2014-2384 - Invalid Pointer Dereference in VMware Workstation and Player
Vulnerability title: Invalid Pointer Dereference in VMware Workstation and Player CVE: CVE-2014-2384 Vendor: VMware Product: Workstation, Player Affected version: VMware WorkStation v10.0.1 build-1379776 and VMware Player v6.0.1 build-1379776 Fixed version: N/A Reported by: Kyriakos Economou...
CVE-2014-2565
The commandline interface in Blue Coat Content Analysis System CAS 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."...
Command injection
The commandline interface in Blue Coat Content Analysis System CAS 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."...
CVE-2014-2565
The commandline interface in Blue Coat Content Analysis System CAS 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."...