7910 matches found
WordPress Image Metadata Cruncher Plugin Cross Site Request Forgery (CVE-2015-1614)
A cross-site request forgery CSRF vulnerability has been reported in WordPress Image Metadata Cruncher Plugin. An attacker could exploit this vulnerability by convincing the user to follow a malicious link or visit an attacker controlled website...
FreeBSD-SA-15:03.sctp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:03.sctp Security Advisory The FreeBSD Project Topic: SCTP stream reset vulnerability Category: core Module: sctp Announced: 2015-01-27 Credits: Gerasimos...
Advantech-AdamView-GNI
!/usr/bin/env ruby Exploit Title: Advantech AdamView .gni SEH Buffer Overflow Date: Dec 09 2014 Vulnerability Discovery: Daniel Kazimirow and Fernando Paez - Core Security Exploit Author: Muhamad Fadzil Ramli mind1355atgmail.com Software Link:...
PT-2024-34260 · Meetup · Meetup
Name of the Vulnerable Software and Affected Versions: Meetup versions 0.1 and earlier Description: The issue affects Meetup, allowing privilege escalation through an authorization bypass. This is due to a user-controlled key vulnerability. Recommendations: For versions 0.1 and earlier, at the...
Sandworm APT Team Found Using Windows Zero Day Vulnerability
UPDATE–A cyberespionage team, possibly based in Russia, has been using a Windows zero day vulnerability to target a variety of organizations in several countries, including the United States, Poland, Ukraine and western Europe. The vulnerability, which will be patched today by Microsoft, is...
VisiWave VWR File Parsing (CVE-2011-2386)
A remote code execution vulnerability exists in VisiWave's Site Survey Report. The vulnerability is caused by a failure to validate a user controlled property. A remote attacker can exploit this vulnerability by using a malicious property, potentially causing arbitrary code to be injected and...
Data Injection Vulnerability in Active Record
The createwith functionality in Active Record was implemented incorrectly and completely bypasses the strong parameters protection. Applications which pass user-controlled values to createwith could allow attackers to set arbitrary attributes on models...
Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...
Blojsom 2.31 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20026/info Blojsom is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script code execute in the browser of...
PhpGedView 2.61 Multiple PHP Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9368/info PhpGedView is prone to multiple file include vulnerabilities. The source of the issue is that a number of scripts that ship with the software permit remote users to influence require paths for various external...
ELinks Relative 0.10.6 /011.1 Path Arbitrary Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23844/info ELinks is prone to an arbitrary code-execution vulnerability. An attacker can exploit this issue to potentially execute arbitrary code with the privileges of the user running the affected application. This issu...
OpenSIS 'modname' - PHP Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
Adobe Reader 10.1.4 JP2KLib&CoolType Crash PoC
No description provided by source. Title : Adobe Reader 10.1.4 JP2KLib&CoolType WriteAV Vulnerability Version : 10.1.4.38 Date : 2012-11-20 Vendor : http://www.adobe.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...
tematres 1.0.3 (auth bypass/sql/xss) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
ManageEngine OpUtils 6.0 - Stored XSS
No description provided by source. Author: loneferret of Offensive Security Product: ManageEngine OpUtils Version: 6 Vendor Site: http://www.manageengine.com Software Download: http://www.manageengine.com/products/oputils/download.html Software Description:...
Prishtina FTP Client 1.x Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7671/info Prishtina FTP client is allegedly prone to a denial of service vulnerability. The condition is reportedly triggered when processing FTP server banners of excessive length. As a result, a malicious...
Pre Classified Listing SQL Vulnerable
No description provided by source. Exploit Title: Pre Classified Listing SQL Vulnerable Vendor url:http://www.sellatsite.com Version:1 Price:60 USD Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-14 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to a...
Cisco Broadcast Access Center for Telco and Wireless Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the Cisco BAC-TW web interface. The vulnerability is due to insufficient CSRF...
Cogent DataHub Command Injection
This module exploits an injection vulnerability in Cogent DataHub prior to 7.3.5. The vulnerability exists in the GetPermissions.asp page, which makes insecure use of the datahubcommand function with user controlled data, allowing execution of arbitrary datahub commands and scripts. This module h...