CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

Tcpdump CFM Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.CFM parser is one of the link failure protocol management parsers. A...

CVE-2017-13052: Out-of-bounds Read

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

PT-2017-12896

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the CFM parser, specifically in the cfm print function within print-cfm.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later ...

PT-2016-7568

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 5800 versions prior to V200R001C00SPC700 Huawei CloudEngine 6800 versions prior to V200R001C00SPC700 Huawei CloudEngine 7800 versions prior to V200R001C00SPC700 Huawei CloudEngine 8800 versions prior to V200R001C00SPC700...

skillon.com XSS vulnerability

Vulnerable URL: http://www.skillon.com/hits3D2.cfm?ip=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=31=10=2015= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 725150 Google Pageran...

kabalarians.com XSS vulnerability

Vulnerable URL: http://www.kabalarians.com/cfm/unsubscribe2.cfm?Email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 67177 Google...

virtualtrials.com XSS vulnerability

Open Bug Bounty ID: OBB-114973 Description| Value ---|--- Affected Website:| virtualtrials.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco IOS Software Ethernet Connectivity Fault Management (CFM) DoS

The remote Cisco device is affected by a denial of service vulnerability due to due to improper parsing of malformed Ethernet Connectivity Fault Management CFM packets. A remote, unauthenticated attacker, using specially crafted CFM packets, could trigger a denial of service condition, resulting ...

Cisco IOS XE Software Connectivity Fault Management (CFM) DoS

The remote Cisco device is affected by a denial of service vulnerability due to due to improper parsing of malformed Ethernet Connectivity Fault Management CFM packets. A remote, unauthenticated attacker, using specially crafted CFM packets, could trigger a denial of service condition, resulting ...

Command injection

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

CVE-2014-3409

Cisco IOS 12.2(33)SRE9a and earlier, and IOS XE 3.13S and earlier are affected by CVE-2014-3409 due to improper parsing in the Ethernet Connectivity Fault Management (CFM) handling feature. A remote, unauthenticated attacker can craft malformed CFM packets to trigger a denial-of-service, causing ...

PT-2014-5298

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.233SRE9a Cisco IOS XE versions prior to 3.13S Description The issue affects the Ethernet Connectivity Fault Management handling feature, allowing remote attackers to cause a denial of service by sending malformed...

CVE-2014-3409: Undefined Security Weakness

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

crownweb (page.cfm) SQL Injection Vulnerability

No description provided by source. crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...

Information disclosure

DISPUTED Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debu...

PT-2011-2594

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions prior to 9.0.1 CHF1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file. This occurs because the...

CVE-2011-0736: Exposure of Sensitive Information to an Unauthorized Actor

Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file. NOTE: the vendor disputes the significance of this issue because the...

cfm cmdshell use of attention-exploit warning-the black bar safety net

cfm-cmdshell 1. html 2. head 3. meta http-equiv="Content-Type" content="text/html; charset=gb2312" 4. titleCFM shell/title 5. /head 6. body 7. !--- os. run --- 8. cfif IsDefined"FORM. cmd" 9. cfoutputcmd/cfoutput 1 0. cfexecute name="C:\Winnt\System32\cmd.exe" 1 1. arguments="/c cmd" 1 2...