AVerCaster Pro RS3400 Web Server Directory Traversal

No description provided by source. Exploit Title: AVerCaster Pro RS3400 web server directory traversal Date: 2012-10-06 Exploit Author: Patrick Saladino Vendor Homepage: http://www.avermedia.com/product/ProductDetail.aspx?Id=560 Version: v.3.1.20 Tested on: Not relevant CVE : none yet Hello, I ju...

aolserver 3.2 win32 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2343/info It is possible for a remote user to gain read access to directories outside the root directory of an AOLserver. Requesting a specially crafted URL composed of '.../' sequences will disclose an arbitrary director...

Igloo <= 0.1.9 (Wiki.php) Remote File Include Vulnerability

No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito,...

Way-Board 2.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclo...

carey internets services commerce.cgi 2.0.1 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2361/info It is possible for a remote user to gain read access to directories and files outside the root directory of Carey Internet Services Commerce.cgi. Requesting a specially crafted URL composed of '/../%00' along wi...

Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download

No description provided by source. ======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor...

Working Resources BadBlue 1.2.7 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2392/info It is possible for a remote user to cause a denial of service condition in Working Resources BadBlue. Requesting a specially crafted URL composed of 284 or more bytes, will cause the server to crash. A restart o...

Openreglement 1.04 (RFI/LFI) Multiple File Include Vulnerability

No description provided by source. ================================================================ Openreglement 1.04 RFI/LFI Multiple File Include Vulnerability ================================================================ + Openreglement 1.04 RFI/LFI Multiple File Include Vulnerability...

Seyeon FlexWATCH Network Video Server 2.2 Unauthorized Administrative Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8942/info It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to presen...

Surfboard httpd 1.1.9 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9299/info It has been reported that Surfboard httpd is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents...

T. Hauck Jana Server 1.45/1.46 Hex Encoded Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2703/info It is possible for a remote user to traverse the directories of a host running Jana Server. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal arbitrary directories. In...

Alt-N MDaemon 3.1.1 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1689/info Alt-N MDaemon 3.1.1 is subject to a denial of service. If a remote user requests a specially crafted URL to the web services within MDaemon the service will crash. A restart of the service is required in order t...

Martin Hamilton ROADS 2.3 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2371/info A remote user could gain read access to known files outside of the root directory where Martin Hamilton ROADS resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename...

Phorum 3.0.7 violation.php3 Arbitrary Email Relay Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin board style chats...

Revive Adserver < 3.0.5 Multiple CSRF Vulnerabilities

According to its version number, the Revive Adserver install hosted on the remote web server is affected by multiple cross-site request forgery CSRF vulnerabilities. This can allow an attacker to delete data and cause service disruptions by enticing an authenticated user to follow a crafted URL...

CVE-2014-3296

The XML programmatic interface XML PI in Cisco WebEx Meeting Server 1.5.1.131 and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527...

Cisco WebEx Meeting Server Sensitive Information Disclosure Vulnerability

A vulnerability in the XML programmatic interface XML PI of Cisco WebEx Meeting Server could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to disclosure of the meeting information. An attacker could exploit this vulnerability by sending a crafte...

Motorola SBG901 Wireless Modem Cross Site Request Forgery

Exploit Title : Motorola SBG901 Wireless Modem CSRF Vulnerability Google dork : N/A Exploit Author: Blessen Thomas Date : 06/01/2014 Vendor Homepage : http://www.arrisi.com/modems/ Software Link : N/A Version : Motorola SBG901 Wireless modem Tested on : Windows 7 CVE : CVE-2014-3778 Type of...

Motorola SBG901 Wireless Modem - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title : Motorola SBG901 Wireless Modem CSRF Vulnerability Google dork : N/A Exploit Author: Blessen Thomas Date : 06/01/2014 Vendor Homepage : http://www.arrisi.com/modems/ Software Link : N/A Version : Motorola SBG901 Wireless...

Microsoft Internet Explorer Crafted URL Remote Code Execution

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a use-after-free condition in Internet Explorer. A remote attacker can exploit this vulnerability by enticing users to open a specially crafted URL...