Viap Automation WinPLC7 5.0.45.5921 - Recv Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'VIPA Authomation WinPLC7 recv Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in VIPA Automation WinPLC7 'james fitts' , 'License' = MSFLICENSE, 'References' = 'ZDI', '17-112' , 'CVE', '2017-5177' ,...

immo-en-cie.be XSS vulnerability

Vulnerable URL: http://www.immo-en-cie.be/site/default.aspx?pagename=aanbod&=nl=tekoop Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7155876 VIP website status:| No Check...

Easy File Sharing Web Server 7.2 - 'POST' Remote Buffer Overflow

!/usr/bin/python Title : EFS Web Server 7.2 POST HTTP Request Buffer Overflow Author : Touhid M.Shaikh Date : 12 June, 2017 Contact: [email protected] Version: 7.2 category: Remote Exploit Tested on: Windows XP SP3 EN Version 5.1.2600 """ Description What is Easy File Sharing Web Server 7....

En Canlı TV - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application En Canlı TV published at the 'play' market has multiple vulnerabilities...

en-ae.wadi.com XSS vulnerability

Open Bug Bounty ID: OBB-236303 Description| Value ---|--- Affected Website:| en-ae.wadi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian DLA-903-1 : hunspell-en-us update

The dictionary provided by this package had an unnecessary unversioned conflict against the thunderbird package which recently got reintroduced into Wheezy. For Debian 7 'Wheezy', this problem has been fixed in version 20070829-6+deb7u1. We recommend that you upgrade your hunspell-en-us packages...

[SECURITY] [DLA 903-1] hunspell-en-us update

Package : hunspell-en-us Version : 20070829-6+deb7u1 The dictionary provided by this package had an unnecessary unversioned conflict against the thunderbird package which recently got reintroduced into Wheezy. For Debian 7 "Wheezy", this problem has been fixed in version 20070829-6+deb7u1. We...

clubmedjobs.ma XSS vulnerability

Vulnerable URL: http://www.clubmedjobs.ma/postuler-en-village?title=azd%22%27--!%3E%3CScript%20/K/%3Econfirm'OPENBUGBOUNTY'%3C/Script%20/K/%3E=All2=All⊂subfamily=All Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:...

saintmacaireenmauges.fr XSS vulnerability

Vulnerable URL: http://www.saintmacaireenmauges.fr/modules.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9023851 VIP website status:| No Check saintmacaireenmauges.fr SSL...

ArcServe UDP 6.0.3792 Update 2 Build 516 Privilege Escalation

Title: ArcServe UDP - Unquoted Service Path Privilege Escalation CWE Class: CWE-427: Uncontrolled Search Path Element Date: 04/09/2016 Vendor: ArcServe Product: ArcServe UDP Standard Edition for Windows, TRIAL Type: Backup Software Version: 6.0.3792 Update 2 Build 516 Download URL:...

code49.com.ar XSS vulnerability

Vulnerable URL: http://www.code49.com.ar/paginas-web-inmobiliarias-en-argentina.php?page=1" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

nikoneurope-en.custhelp.com XSS vulnerability

Vulnerable URL: http://nikoneurope-en.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 14.09.2017 Latest check for patch:| 14.09.2017 06:19 GMT Vulnerability type:| XS...

en-my.qerja.com XSS vulnerability

Vulnerable URL:...

flaner-en-provence.fr XSS vulnerability

Vulnerable URL: http://www.flaner-en-provence.fr/catalogue/index.php?VARtheme=30%27%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:41 GMT Vulnerability type:| XSS Vulnerability...

grossiste-en-ligne.com XSS vulnerability

Vulnerable URL: http://www.grossiste-en-ligne.com/site/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 217011 VIP website status:| No Check grossiste-en-ligne.com SSL...

Joomla En-Masse 6.4 SQL injection vulnerability

No description provided by source...

Joomla En-Masse 6.4 SQL Injection

Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15 Google Dork: inurl:component/enmasse/ PoC: id Parameter...

Joomla En Masse (com_enmasse) 5.1 < 6.4 Component - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15...

Résultats Foot en Direct - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Résultats Foot en Direct published at the 'play' market has multiple vulnerabilities...

En Son Haber - Güncel Haberler - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application En Son Haber - Güncel Haberler published at the 'play' market has multiple vulnerabilities...