10853 matches found
Amazon Linux: Security Advisory (ALAS-2015-514)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Elastix < 2.5 - PHP Code Injection
'; $faf=fopen"fa.txt","w+"; fwrite$faf,$inj; fclose$faf; $myf='fa.txt'; $url = $target."/vtigercrm/phprint.php?action=fa&module=ff&langcrm=../../modules/Import/ImportStep2.php%00"; // URL $reffer = "http://1337s.cc/index.php"; $agent = "Mozilla/5.0 Windows; U; Windows NT 5.0; en-US; rv:1.4...
[SECURITY] Fedora 22 Update: php-guzzle-Guzzle-3.9.3-5.fc22
Guzzle takes the pain out of sending HTTP requests and the redundancy out of creating web service clients. Guzzle is a framework that includes the tools needed to create a robust web service client, including: Service descriptions for defining the inputs and outputs of an API, resource iterators...
WordPress Theme GeoPlaces3 - Arbitrary File Upload
WordPress Theme GeoPlaces3 - Arbitrary File Upload Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility Google Dork: inurl:/wp-content/themes/GeoPlaces3/ Date: 23 August 2015 Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme Teste...
WordPress Theme GeoPlaces3 - Arbitrary File Upload
Description : Wordpress Themes GeoPlaces3 - Arbitrary File Upload vulnerbility Google Dork: inurl:/wp-content/themes/GeoPlaces3/ Date: 23 August 2015 Vendor Homepage: http://templatic.com/app-themes/geo-places-city-directory-wordpress-theme Tested on: Win 7 & Win 8.1 Author: MdnNewbie | Gantenger...
vBulletin x.x.x rce "0day"
Not really a 0day since it's fixed in some versions, but still an exploit that doesn't seem to be "that" public. Please note, I didn't find this. vBulletin's memcache setting is vulnerable in certain versionsall before 4.2.2 to an RCE. vBulletin seem to have refused to classify it as a...
vBulletin < 4.2.2 - Memcache Remote Code Execution
vBulletin's memcache setting is vulnerable in certain versionsall before 4.2.2 to an RCE. vBulletin seem to have refused to classify it as a vulnerability or post anything about it, or put anything in the announcements on their website. They say "PL2 4.2.2 should prevent the use of localhost,"...
Gkplugins Picasaweb - Download File
Gkplugins Picasaweb - Download File Exploit Title: Gkplugins Picasaweb Download File Date : 2015-08-13 Exploit Author : TMT VNhgroup Vendor Homepage: https://gkplugins.com/ Tested on: Windows 7 File ------------------------ $fileout = $GET'f'; -- can you download file $filelength = $GET'l';...
vBulletin Memcache Remote Code Execution
Not really a 0day since it's fixed in some versions, but still an exploit that doesn't seem to be "that" public. Please note, I didn't find this. vBulletin's memcache setting is vulnerable in certain versionsall before 4.2.2 to an RCE. vBulletin seem to have refused to classify it as a...
Scientific Linux Security Update : curl on SL6.x i386/x86_64 (20150722)
It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker able to trick a user into connecting to a malicious server could use this flaw to set the user's cookie to a crafted domain, making other cookie-related issu...
OracleVM 3.3 : curl (OVMSA-2015-0107)
The remote OracleVM system is missing necessary patches to address critical security updates : - require credentials to match for NTLM re-use CVE-2015-3143 - close Negotiate connections when done CVE-2015-3148 - reject CRLFs in URLs passed to proxy CVE-2014-8150 - use only full matches for hosts...
Oracle Linux 6 : curl (ELSA-2015-1254)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1254 advisory. - require credentials to match for NTLM re-use CVE-2015-3143 - close Negotiate connections when done CVE-2015-3148 - reject CRLFs in URLs passed to pro...
RedHat Update for curl RHSA-2015:1254-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cURL and libcurl Cookie Path Parsing Remote Code Execution (CVE-2015-3145)
A heap buffer underflow vulnerability exists in cURL and libcurl. The vulnerability is due error when parsing a cookie path in an HTTP response. A remote, unauthenticated attackers can exploit this vulnerability by enticing user to perform a cURL on a crafted URL or provide malicious HTTP respons...
RHEL 6 : curl (RHSA-2015:1254)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1254 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...
curl: URL request injection vulnerability in parseurlandfillconn()
It was discovered that the libcurl library failed to properly handle URLs with embedded end-of-line characters. An attacker able to make an application using libcurl access a specially crafted URL via an HTTP proxy could use this flaw to inject additional headers to the request or construct...
curl: re-using authenticated connection when unauthenticated
It was discovered that libcurl could incorrectly reuse NTLM-authenticated connections for subsequent unauthenticated requests to the same host. If an application using libcurl established an NTLM-authenticated connection to a server, and sent subsequent unauthenticated requests to the same server...
curl: incorrect handle duplication after COPYPOSTFIELDS
A flaw was found in the way the libcurl library performed the duplication of connection handles. If an application set the CURLOPTCOPYPOSTFIELDS option for a handle, using the handle's duplicate could cause the application to crash or disclose a portion of its memory...
FreiChat 9.6 - SQL Injection
FreiChat 9.6 - SQL Injection / Exploit Title: FreiChat 9.6 SQL Injection Date: 27-11-2014 Software Link: http://codologic.com/page/freichat-free-php-chat-script-software Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...
WordPress Plugin ACF Frontend Display 2.0.5 - Arbitrary File Upload
+---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Download Plugin: https://downloads.wordpress.org/plugin/acf-frontend-display.2.0.5.zip +...