Socat 1.7.3.4 - Heap-Based Overflow Vulnerability

Exploit Title: Socat 1.7.3.4 - Heap Based Overflow PoC Exploit Author: hieubl from HPT Cyber Security Vendor Homepage: http://www.dest-unreach.org/ Software Link: http://www.dest-unreach.org/socat/ Version: 1.7.3.4 Tested on: Ubuntu 16.04.6 LTS CVE : Heap-Based Overflow due to Integer Overflow an...

CVE-2014-1214: Unrestricted Upload of File with Dangerous Type

views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...

PT-2019-7074

Name of the Vulnerable Software and Affected Versions ProJoom Smart Flash Header NovaSFH component versions 3.0.2 and earlier for Joomla! Description The issue allows remote attackers to upload and execute arbitrary files. This is achieved via a crafted dest parameter and an arbitrary extension i...

Command injection

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way...

PT-2019-8620

Name of the Vulnerable Software and Affected Versions Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 Description An issue was discovered that allows command injection on the device. The device provides a user with the capability of adding new routes, and the POST paramete...

CVE-2017-8333: Improper Neutralization of Special Elements used in a Command

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way...

PT-2019-11215

Name of the Vulnerable Software and Affected Versions: SAP BASIS versions 7.0 through 7.02 SAP BASIS versions 7.10 through 7.30 SAP BASIS versions 7.31 SAP BASIS versions 7.40 SAP BASIS versions 7.50 through 7.53 Description: The issue concerns the ABAP BASIS function modules INST CREATE R3 RFC...

CVE-2018-17678

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2018-10500

Name of the Vulnerable Software and Affected Versions ASUSTOR AS6202T ADM version 3.1.0.RFQ3 Description A path traversal issue in the fileExplorer.cgi component allows attackers to specify arbitrary paths to system files, enabling them to create folders using the dest folder parameter...

PT-2018-2613

Name of the Vulnerable Software and Affected Versions Dasan GPON Routers affected versions not specified Description An issue was discovered on Dasan GPON home routers where Command Injection can occur via the dest host parameter in a "diag action=ping" request to a "GponForm/diag Form" URI. The...

GPon Router Remote Command Execution Vulnerability

Dasan GPON is a home router product from Dasan Korea. A command injection vulnerability exists in the Dasan GPON Home Router that originates when a user revisits the /diag.html page where the router saves the results of the Internet Packet Explorer in /tmp and transmits it to the user. An attacke...

Synology DiskStation Manager Directory Traversal Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music and more. A directory traversal vulnerability exists in SYNO.FileStation.Extract in Synology DSM versions 6.0.x...

PT-2017-14879

Name of the Vulnerable Software and Affected Versions FS Makemytrip Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "show-flight-result.php" endpoint, specifically through the fl orig or fl dest parameters. Recommendations For FS Makemytrip Clon...

PT-2017-14271

Name of the Vulnerable Software and Affected Versions Synology File Station versions prior to 1.1.1-0099 Description The issue allows remote authenticated users to write arbitrary files via the dest folder path parameter in the SYNO.FileStation.Extract function. Recommendations For versions prior...

PT-2014-8923

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.18 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the dest id field in the admin/copy field.php...

PT-2014-4568

Name of the Vulnerable Software and Affected Versions OpenX versions 2.8.10 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This can be achieved via a URL in the dest parameter to "adclick.php" or the maxdest paramet...

CVE-2014-2230: Undefined Security Weakness

Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 dest parameter to adclick.php or 2 maxdest parameter to ck.php...

CVE-2010-0641: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server CCS 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

kernel security and bug fix update

2.6.18-53.1.19.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574...