CVE-2013-6079

The CVE-2013-6079 entry concerns MostGear Soft Easy LAN Folder Share 3.2.0.100, where a buffer overflow in the application allows local users to cause a denial of service (crash) and potentially execute arbitrary code. The issue can be triggered by a long string in two places: (1) the registratio...

CVE-2013-6079: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long string in the 1 registration code field in the activate license window or the 2...

PT-2013-5944

Name of the Vulnerable Software and Affected Versions MostGear Soft Easy LAN Folder Share version 3.2.0.100 Description A buffer overflow issue exists, potentially allowing local users to cause a denial of service application crash and possibly execute arbitrary code. This can be achieved by...

[SECURITY] Fedora 20 Update: wordpress-3.6.1-1.fc20

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web...

WordPress Event Easy Calendar Plugin - Multiple Cross Site Request Forgery

Event Easy Calendar plugin is prone to multiple CSRF vulnerabilities that allow to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible. Solution Upgrate the plugin...

WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/62269/info The Event Easy Calendar plugin for WordPress is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote...

WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/62269/info The Event Easy Calendar plugin for WordPress is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application...

Woltlab Burning Board FLVideo Addon SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVideo Addon for WB...

Woltlab Burning Board FLVideo Addon - video.php?value SQL Injection

Woltlab Burning Board FLVideo Addon - video.php?value SQL Injection Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVide...

Woltlab Burning Board FLVideo Addon - 'video.php?value' SQL Injection

Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVideo Addon for WBB © 2007 by Danny König Tested on: Windows8/Backtrack...

VideoLAN VLC Media Player 2.0.8 - .m3u Local Crash (PoC)

VideoLAN VLC Media Player 2.0.8 - .m3u Local Crash PoC Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs...

VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)

Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs.m3u"; print file $PoC; print "\n + File successfully created!\n" or d...

AZL-41159 CVE-2013-1633 affecting package python-pip 24.2-10

easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH)

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow SEH !/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi-...

Easy Blog by JM LLC - Multiple Vulnerabilities

Dear all, I have discovered some vulnerabilities in Easy Blog, developed by JM LLC. Cheers, Sp3ctrecore ADVISORY =========================================== Easy Blog JM LLC - Multiple Vulnerabilities =========================================== Software................: Easy Blog Software...

Easy Blog by JM LLC - Multiple Vulnerabilities

Easy Blog by JM LLC - Multiple Vulnerabilities Dear Offensive Security, I have discovered some vulnerabilities in Easy Blog, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities...

Easy Blog by JM LLC - Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities ============================================== Software................: Easy Blog Software link...........:...

Easy Blog by JM LLC - Multiple Vulnerabilities

Dear Offensive Security, I have discovered some vulnerabilities in Easy Blog, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities ==============================================...

Easy Blog XSS / SQL Injection / Shell Upload

ADVISORY ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities ============================================== Software................: Easy Blog Software link...........: http://www.jmagness.com/download/EasyBlog.zip Vendor..................: JM LLC Vendor...

CVE-2013-1955

Multiple cross-site scripting XSS vulnerabilities in 1 index.php and 2 datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...