52 matches found
Denial of Service Vulnerability in Wizards Secure Endpoints
Wizards Terminal Security is a computer system security protection software developed by Wizards. Wizards Secure Terminal has a denial-of-service vulnerability that can be exploited by attackers to construct malformed data and cause a denial of service...
CVE-2019-11539
creationtimestamp| type| source ---|---|--- 2019-09-05 11:14:28+00:00| published-proof-of-concept| https://t.me/ExcreamOnSecurity/263 2019-11-12 09:06:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pulsesecurecmdexec.rb 2019-11-20...
CVE-2019-2745
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java...
CVE-2018-0683
Buffer overflow in Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier allows remote attackers to execute arbitrary code or cause a denial-of-service DoS condition via Cookie data...
UBUNTU-CVE-2018-11033
The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted JPEG data...
phpcms v9 目录穿越(遍历)漏洞
No description provided by source...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...
The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger service failures such as dereferencing uninitialized pointers o...
The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.
The vulnerability of the SPL library implementation in ext/spl/splarray.c of the PHP interpreter lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted data...
Microsoft .NET Framework WinForms Information Disclosure Vulnerability
WinForms a.k.a. Microsoft Windows Forms is a smart client component of the .NET Development Framework from the United States Microsoft Microsoft and part of the graphical user interface of the . It provides access to Windows native native components by encapsulating existing Windows APIs Win32 AP...
TRS init_sysUsers.xml 信息泄漏漏洞
No description provided by source...
CVE-2015-8317
The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an 1 unterminated encoding value or 2 incomplete XML declaration in XML data, which triggers an out-of-bounds heap read...
Pixelactivo 3.0 (idx) Remote SQL Injection Vulnerability
No description provided by source. -------------------------AllaH AkbaR------------------------------- Pixelactivo Remote SQL Injection Vulnerability --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...
Kisisel Site 2007 SQL注入漏洞
Kisisel Site 2007是一款基于ASP的WEB应用程序。 Kisisel Site 2007不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'forum.asp'脚本对用户提交的'forumid'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Kisisel Site 2007 目前没有解决方案提供： http://www.aspindir.com/goster/4693...
photopostRetrieve.txt
Update: 2:41 PM 5/11/2005 Subject: " PhotoPost Arbitrary Data Exploit " Description: PhotoPost is a popular commercial image publishing software. Everyone loves showing off their photos! Add PhotoPost to your site, or let us install it for you,and your visitors will be able to upload their photos...
[UNIX] PhotoPost Arbitrary Data (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
MPlayer < 1.0pre5try2 Get_Header Remote Client-Side Buffer Overflow
Binary data 2458.prm...
Oracle MySQL < 4.0.21 Remote GRANT Privilege Escalation
Binary data 2370.prm...