9060 matches found
PHP 5.4.x < 5.4.31 CLI Server 'header' DoS
According to its banner, the version of PHP 5.4.x in use on the remote web server is a version prior to 5.4.31. It is, therefore, affected by a denial of service vulnerability that affects the built-in command line development server. The function 'sapicliserversendheaders' in the file...
Juniper Networks Junos OS Multiple Privilege Escalation Vulnerabilities
Privilege Escalation Vulnerability over CLI SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...
CVE-2014-3816
Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8-S2, 12.3 before 12.3R7, 13.1 before 13.1R4-S2, 13.2 before 13.2R5, 13.3 before 13.3R2-S2, and 14.1 before 14.1...
Medium: php54
Issue Overview: acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. A denial of service flaw was found in the way the File Information fileinfo extension parsed certain...
Fedora 19 : php-5.5.14-1.fc19 (2014-7782)
26 Jun 2014, PHP 5.5.14 Core : - Fixed BC break introduced by patch for bug 67072. Anatol, Stas - Fixed bug 66622 Closures do not correctly capture the late bound class static:: in some cases. Levi Morrison - Fixed bug 67390 insecure temporary file use in the configure script. CVE-2014-3981 Remi ...
dompdf 0.6.0 (dompdf.php, read param) - Arbitrary File Read
No description provided by source. Vulnerability title: Arbitrary file read in dompdf CVE: CVE-2014-2383 Vendor: dompdf Product: dompdf Affected version: v0.6.0 Fixed version: v0.6.1 partial fix Reported by: Alejo Murillo Moyas Details: An arbitrary file read vulnerability is present on dompdf.ph...
CuteNews <= 1.4.5 Admin Password md5 Hash Fetching Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // Cutenews = 1.4.5 admin password md5 hash fetching exploit // Version 1.0 // written by Jan...
Invision Power Board <= 2.3.5 - Remote SQL Injection Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind waraxe // Estoni...
eLitius 1.0 - Remote Command Execution Exploit
No description provided by source. ?php //786 / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Internet Explorer Winhlp32.exe MsgBox Code Execution
No description provided by source. $Id: ms10022ievbscriptwinhlp32.rb 10504 2010-09-28 16:19:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...
phpslash <= 0.8.1.1 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...
PHP 4.4.6 crack_opendict() Local Buffer Overflow Exploit PoC
No description provided by source. ?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloadedcrack dieyou need the crack extension loaded.; $scode=...
point-cli Gem for Ruby /lib/commands/setup.rb Process Table Local Plaintext Credential Disclosure
point-cli Gem for Ruby contains a flaw in /lib/commands/setup.rb that is due to the application exposing credential information in plaintext in the process table. This may allow a local attacker to gain access to credential information...
Juniper Networks Junos OS Exclusive Edit Mode Privilege Escalation Vulnerability
Privilege Escalation in exclusive edit mode SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...
Fedora 19 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc19 / php-5.5.13-3.fc19 / etc (2014-6904)
29 May 2014, PHP 5.5.13 CLI server : - Fixed bug 67079 Missing MIME types for XML/XSL files. Anatol COM : - Fixed bug 66431 Special Character via COM Interface CPUTF8. Anatol Core : - Fixed bug 65701 copy doesn't work when destination filename is created by tempnam. Boro Sitnikovski - Fixed bug...
Fedora 20 : php-phpunit-PHPUnit-MockObject-1.2.3-4.fc20 / php-5.5.13-3.fc20 / etc (2014-6901)
29 May 2014, PHP 5.5.13 CLI server : - Fixed bug 67079 Missing MIME types for XML/XSL files. Anatol COM : - Fixed bug 66431 Special Character via COM Interface CPUTF8. Anatol Core : - Fixed bug 65701 copy doesn't work when destination filename is created by tempnam. Boro Sitnikovski - Fixed bug...
CVE-2013-2073
The Connected documents confirm CVE-2013-2073 affects the Transifex command-line client, where versions before 0.9 do not validate X.509 certificates, allowing an attacker to MITM-spoof the Transifex server with an arbitrary certificate. Impact is spoofing data-transfer connections due to missing...
Cisco Unified Communications Manager Arbitrary File Read Vulnerability
A vulnerability in the command-line interface CLI of Cisco Unified Communications Manager Cisco UCM could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to incomplete input validation. An attacker could exploit this vulnerability by issuin...
CVE-2014-0880
IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...
Code injection
IBM SAN Volume Controller; Storwize V3500, V3700, V5000, and V7000; and Flex System V7000 with software 6.3 and 6.4 before 6.4.1.8, and 7.1 and 7.2 before 7.2.0.3, allow remote attackers to obtain CLI access, and consequently cause a denial of service, via unspecified traffic to the administrativ...