1016 matches found
MiniShare 1.4.1 - Remote Buffer Overflow HEAD and POST Method Exploit
Not only the GET method is vulnerable to BOF CVE-2004-2271. HEAD and POST methods are also vulnerable. The difference is minimal, both are exploited in the same way. Only 1 byte difference: GET = 3, HEAD and POST = 4 length ------------------------------------------------------------------- EAX...
MiniShare 1.4.1 - 'HEAD/POST' Remote Buffer Overflow
Not only the GET method is vulnerable to BOF CVE-2004-2271. HEAD and POST methods are also vulnerable. The difference is minimal, both are exploited in the same way. Only 1 byte difference: GET = 3, HEAD and POST = 4 length ------------------------------------------------------------------- EAX...
R 3.4.4 (Windows 10 x64) Buffer Overflow
!/usr/bin/python R 3.4.4 Win10 x86 Buffer Overflow discovered by: bzyo author: Charles Truscott I love you Alison Thompson OAM tested on: Windows 10 x86 rebooted for practice defeating ASLR/DEP -------------------------------------------- GUI Preferences - paste boom.txt into 'Language for menus...
Eltex ESP-200 Privilege Vulnerability
Eltex ESP-200 is a wireless router product. An elevation of privilege vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to activate an elevated privilege user...
Eltex ESP-200 Information Disclosure Vulnerability
Eltex ESP-200 is a wireless router product. An information disclosure vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to extract password hash information for all users...
Eltex ESP-200 Command Injection Vulnerability
Eltex ESP-200 is a wireless router product. A command injection vulnerability exists in the Eltex ESP-200 using firmware version 1.2.0. An attacker can exploit this vulnerability to execute arbitrary code...
CVE-2018-14079
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...
CVE-2018-15360
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15357
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...
Command injection
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...
Code injection
An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15357
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...
Default credentials
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15356
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15359
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0...
Code injection
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...
Default configuration
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0...
CVE-2018-15358
An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0...