1906 matches found
Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles() Buffer Overflow
No description provided by source. html !-- Exploit Title: Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles Buffer Overflow Exploit Found By: DrIDE Download: http://www.viscom.com Greets: bz1p, [email protected] for finding the app. Tested on: XP SP3 IE7 CVE: 0day -- object...
SHOP-INET 4 (show_cat2.php grid) - SQL Injection Vulnerability
No description provided by source. SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
linux/x86 cp /bin/sh /tmp/katy ; chmod 4555 katy 126 bytes
No description provided by source. / Linux/x86 /bin/cp /bin/sh /tmp/katy ; chmod 4555 /tmp/sh using fork / include stdio.h char shellcode = \xeb\x5e\x5f\x31\xc0\x88\x47\x07\x88\x47\x0f\x88\x47\x19\x89\x7f \x1a\x8d\x77\x08\x89\x77\x1e\x31\xf6\x8d\x77\x10\x89\x77\x22\x89...
CVE-2014-2654: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...
PT-2014-4854
Name of the Vulnerable Software and Affected Versions MobFox mAdserve versions 2.0 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the id parameter to specific API endpoints, including "edit ad unit.php", "view...
CVE-2014-2035
Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...
Siemens CP 1604 and CP 1616 Improper Access Control
Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens CP 1604 and CP 1616 communication modules. Siemens has identified a vulnerability in the debugging interface of the CP 1604 and CP 1616 communications modules. Independent researchers Christopher...
Fedora Update for kdeaccessibility FEDORA-2013-13112
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-1483
wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterpris...
Oracle Linux 5 : busybox (ELSA-2012-0308)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0308 advisory. 1:1.2.0-13 - Resolves: 768083 'busybox various flaws' including: 'buffer underflow in decompression' 'udhcpc insufficient checking of DHCP options'...
PT-2013-4132
Name of the Vulnerable Software and Affected Versions SAP Production Planning and Control affected versions not specified Description The issue allows remote authenticated users to bypass intended transaction restrictions in the Engineering Workbench component. This is due to a problem in the CP ...
Design/Logic Flaw
The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...
CVE-2013-0659
The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...
CVE-2013-0659
Affected software/hardware: Siemens CP 1604 and CP 1616 interface cards (CP 1604/1604 Microbox package and onboard SIMANTIC IPCs) with firmware prior to 2.5.2. Vulnerability details: Debugging interface is enabled by default; sending a crafted UDP packet to port 17185 can allow remote code execut...
PT-2013-2509
Name of the Vulnerable Software and Affected Versions Siemens CP 1604 and CP 1616 interface cards versions prior to 2.5.2 Description The issue allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185, specifically targeting the debugging feature. Recommendations F...
CVE-2013-0659: Undefined Security Weakness
The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185...
MyBB Profile Wii Friend Code Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS Dork: intitle:"Profile of" intext:"Wii Friend Code" inurl:member.php Date: 1/3/2013 Exploit Author: Ichi Vendor Homepage: http://mods.mybb.com/view/profile-wii-friend-code Softwar...
MyBB Profile Wii Friend Code - Multiple Vulnerabilities
MyBB Profile Wii Friend Code - Multiple Vulnerabilities Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS Dork: intitle:"Profile of" intext:"Wii Friend Code" inurl:member.php Date: 1/3/2013 Exploit Author: Ichi Vendor Homepage: http://mods.mybb.com/view/profile-wii-friend-code...
MyBB Profile Wii Friend Code - Multiple Vulnerabilities
Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS Dork: intitle:"Profile of" intext:"Wii Friend Code" inurl:member.php Date: 1/3/2013 Exploit Author: Ichi Vendor Homepage: http://mods.mybb.com/view/profile-wii-friend-code Software Link:...
Image Viewer CP ActiveX 控件Image2PDF栈缓冲区溢出漏洞
CVE ID: CVE-2010-5194 Image Viewer CP是图形浏览器activex控件。 Viscom Image Viewer CP Pro 8.0、Gold 5.5、Gold 6.0及更早版本的SCRIBBLE.ScribbleCtrl.1 ActiveX控件Image2PDF函数存在栈缓冲区溢出,通过超长的strPDFFile参数可导致执行任意代码。 0 Viscom Softwares Image Viewer CP 厂商补丁: Viscom Softwares ----------------...