9560 matches found
WordPress Colorbold Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
WordPress Simplo Theme - Email Spoofing
Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that 1 add a new super user account via a request to admin/users/add, 2 insert cross-site scripting XSS sequences via the apikeylabel...
MultiMonitorTool v1.63 - Multiple Monitors on Windows
MultiMonitorTool is a small tool that allows you to do some actions related to working with multiple monitors. With MultiMonitorTool, you can disable/enable monitors, set the primary monitor, save and load the configuration of all monitors, and move windows from one monitor to another. You can do...
Linux/x86 - Disable randomize stack addresse - 106 bytes
No description provided by source. / Title: Linux/x86 - Disable randomize stack addresse - 106 bytes Set randomizevaspace to zero Author: Jonathan Salwan submit ! shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Database of Shellcodes...
Opial 1.0 - Arbitrary File Upload/XSS/SQL Injection Vulnerabilities
No description provided by source. ::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File Upload-- 1. Go to http://www.site.com/register.php 2...
Linux/ARM - Disable ASLR Security - 102 bytes
No description provided by source. / Title: Linux/ARM - Disable ASLR Security - 102 bytes Date: 2010-06-20 Tested: Linux ARM9 2.6.28-6-versatile Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Database of shellcodes http://www.shell-storm.org/shellcode/...
Polycom HDX Telnet Authorization Bypass
No description provided by source. ======================================================================== = Polycom HDX Telnet Authorization Bypass = = Vendor Website: = www.polycom.com = = Affected Version: = Polycom HDX devices: = All releases prior to and including Commercial 3.0.5 = = Publi...
Linux/x86-64 - Disable ASLR Security - 143 bytes
No description provided by source. / Title: Linux/x86-64 - Disable ASLR Security - 143 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of shellcodes http://www.shell-storm.org/shellcode/...
MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities
No description provided by source. Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMI...
D-Link DSL-2740B - Multiple CSRF Vulnerabilities
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router CSRF Vulnerability Date : 09-08-2013 Author : Ivano Binetti http://ivanobinetti.com...
OpenSSL SSLv2 - Malformed Client Key Remote Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/5363/info A buffer-overflow vulnerability has been reported in some versions of OpenSSL. The issue occurs in the handling of the client key value during the negotiation of the SSLv2 protocol. A malicious client may be abl...
OpenSSL SSLv2 - Malformed Client Key Remote Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5363/info A buffer-overflow vulnerability has been reported in some versions of OpenSSL. The issue occurs in the handling of the client key value during the negotiation of the SSLv2 protocol. A malicious client may be abl...
Evilsentinel <= 1.0.9 (multiple vulnerabilities) Disable Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo ' Evilsentinel = 1.0.9 Disable Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love '; if $argc3 echo Usage: php .$argv0. Host Path newmail...
Comodo Firewall Pro 2.4.x - Local Protection Mechanism Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22775/info Comodo Firewall Pro is prone to a protection-mechanism-bypass vulnerability. Exploiting this issue allows local attackers to bypass protection mechanisms implemented to restrict access to altering the firewall'...
Scientific-Atlanta, Inc. DPR2320R2 - Multiple CSRF vulnerability
No description provided by source. Exploit Title: DPR2320R2 Scientific-Atlanta, Inc.A Cisco COMPANY :: Multiple CSRF vulnerability Author: sajith Category: Hardware/Wireless Router vendor home page: http://www.cisco.com/web/consumer/support/modemDPR2320.html Software Version: v2.0.2r1262-090417 1...
ImgPals Photo Host 1.0 - Admin Account Disactivation
No description provided by source. -=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+...
Zero-Day TimThumb WebShot Vulnerability leaves Thousands of Wordpress Blogs at Risk
Yesterday we learned of a critical Zero-day vulnerability in a popular image resizing library called TimThumb, which is used in thousands WordPress themes and plugins. WordPress is a free and open source blogging tool and a content management system CMS with more than 30,000 plugins, each of whic...
PT-2014-2179 · D Link · D-Link Dir-601 Wireless N150 Home Router
Name of the Vulnerable Software and Affected Versions: D-Link DIR-601 Wireless N150 Home Router version 1.02NA Description: A directory traversal issue in the TFTP server of the affected router allows remote attackers to read arbitrary files. The exact vectors used for exploitation are not...
F5 ARX Data Manager contains a SQL injection vulnerability
Overview F5 ARX Data Manager 3.0.0 - 3.1.0 contains a SQL injection vulnerability. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command F5 ARX Data Manager 3.0.0 - 3.1.0 contains an unspecified SQL injection vulnerability. --- Impact A remote authenticated attack...