Sam Spade 1.14 - S-Lang Command Field Overflow (SEH)

!/usr/bin/env python Exploit Title : Sam Spade 1.14 S-Lang Command Field SEH Overflow Crash PoC Discovery by : Nipun Jaswal Email : [email protected] Discovery Date : 12/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested...

Cisco VPN Client Elevation of Privilege Vulnerability

Cisco VPN Client is a cross-platform client software suite. Cisco VPN Client fails to properly assign permissions to the vpnclient.ini file, which can be elevated by a local attacker by entering an arbitrary process name into the 'Command' field of the ApplicationLauncher...

Design/Logic Flaw

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section...

PYSEC-2014-98

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

CVE-2014-2260

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

CVE-2014-2260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

PT-2014-4590

Name of the Vulnerable Software and Affected Versions Ajenti versions 1.2.13 through 1.2.14 Ajenti version 1.2.15 is not affected, so versions prior to 1.2.15 are vulnerable. However, since 1.2.13 is the lowest version mentioned as vulnerable, the range can be simplified to: Ajenti versions 1.2.1...

PT-2013-4848

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by creating a task with a command field in conjunction with an arguments field in the...