2383 matches found
Android Settings Pendingintent Leak Vulnerability
In Android versions prior to 5.0 and possibly greater than and equal to 4.0, Settings application leaks Pendingintent with a blank base intent neither the component nor the action is explicitly set to third party applications. Due to this, a malicious app can use this to broadcast intent with the...
Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework code of Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...
Cisco Aironet DHCP Denial of Service Vulnerability
A vulnerability in the DHCP subsystem of Cisco Aironet access points could allow an unauthenticated, adjacent attacker to create a denial of service condition. The vulnerability is due to an error condition that may occur when very short DHCP leases are in use. If an attacker can prevent the acce...
Cisco Aironet EAP Debugging Denial of Service Vulnerability
A vulnerability in the debugging features of Cisco IOS running on Cisco Aironet access points could allow an unauthenticated, adjacent attacker to create a denial of service condition. The vulnerability is due to a failure to properly process a certain debugging message that may occur when the...
CVE 2013-6272 Android phone provide right to call vulnerability analysis-vulnerability warning-the black bar safety net
Description This class of vulnerability by the German security research organisation Curesec discovered late last year when the secret to tell Google until this year 7 month when it decided to publish a similar vulnerability. This vulnerability relates to the com. android. phone...
GNU bash 4.3.11 - Environment Variable dhclient
!/usr/bin/python Exploit Title: dhclient shellshocker Google Dork: n/a Date: 10/1/14 Exploit Author: @0x00string Vendor Homepage: gnu.org Software Link: http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz Version: 4.3.11 Tested on: Ubuntu 14.04.1 CVE :...
Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability
A vulnerability in parsing of malformed Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit NPU and a line...
Cisco IOS XR Software Packet Parsing Denial of Service Vulnerability
A vulnerability in the packet parsing code of Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a Network Processor NP chip and a line card processing traffic. The vulnerability is due ...
VideoWhisper Live Streaming Integration < 4.27.2 - Cross-Site Scripting (XSS)
The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit
No description provided by source. Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus...
ActiveCampaign 1-2-All Broadcast Email 4.0 Admin Control Panel Username SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15400/info ActiveCampaign 1-2-All Broadcast Email is prone to an SQL-injection vulnerability. This is an input-validation issue related to data that will be used in SQL queries, allowing a remote user to influence the...
Unreal Tournament 2004 "secure" Overflow (Win32)
No description provided by source. $Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow
No description provided by source. MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Context: Broadcast,...
Really Simple IM 1.3beta DoS Proof of Concept
No description provided by source. !/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software: http://code.google.com/p/reallysimpleim/ Nods...
Colin McRae Rally 2004 Multiplayer Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10464/info It is reported that Colin McRae Rally 2004 has a flaw handling server responses when entering the multiplayer menu of the game. When entering the multiplayer menu, the game client sends a broadcast message...
Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + Jinzora = 2.7 includepath Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- +...
PopMessenger <= 1.60 Remote Denial of Service Exploit
No description provided by source. ///////////////////////// popmsgboom.c / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h include winerr.h define close closesocket else include unistd.h include sys/socket.h include sys/types.h...
Battlefield 1942 <= 1.6.19 + Vietnam <= 1.2 - Broadcast Client Crash
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
Broadcast Machine 0.1 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. ================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor :...
Unreal Tournament 2004 "secure" Overflow (Linux)
No description provided by source. $Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...