find-a-car.info Open Redirect vulnerability

Open Bug Bounty ID: OBB-124268 Description| Value ---|--- Affected Website:| find-a-car.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2015-6004

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via 1 the UniqueID aka sUniqueID parameter to WrFreeFormText.asp in the Reports component or 2 the Find Device parameter...

CVE-2015-6004

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via 1 the UniqueID aka sUniqueID parameter to WrFreeFormText.asp in the Reports component or 2 the Find Device parameter...

PT-2015-7107 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: IPSwitch WhatsUp Gold versions prior to 16.4 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two parameters: 1 the UniqueID also known as sUniqueID parameter to the "WrFreeFormText.as...

Man-db 2.6.7.1 - Local Privilege Escalation

Man-db 2.6.7.1 - Local Privilege Escalation / EDB Note: man:man - man:root http://www.halfdog.net/Security/2015/SetgidDirectoryPrivilegeEscalation/ man:root - root:root http://www.halfdog.net/Security/2015/MandbSymlinkLocalRootPrivilegeEscalation/ CreateSetgidBinary.c...

torrents.net XSS vulnerability

Vulnerable URL: http://www.torrents.net/find/a+brilliant/=1prompt/XSSPOSED/...

Unspecified vulnerability in Drupal Taxonomy Find module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Taxonomy Find is one of the modules that provides a search interface for finding categories. A security vulnerability exists in the Drupal Taxonomy Find module. No details of the...

MacOS X 10.11 Hardlink Resource Exhaustion

/ MacOS X 10.11 hardlink bomb cause resource exhaustion Avast PoC Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: zip, tar, find - AntiVirus: Avast, Eset32 Let's back to an old bug, which Apple does not patch until...

MacOS X 10.11 FTS Buffer Overflow

MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: ls, find, rm - probably more Apple file system suffer for a issue recognised in FTS library. The ma...

Taxonomy Find - Unsupported - SA-CONTRIB-2015-153

This module enables you to add a simple search interface to lookup taxonomy terms by name. The module doesn't sufficiently sanitize output of taxonomy vocabulary names and term names. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer...

SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability

SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...

nissan.it XSS vulnerability

Vulnerable URL: http://www.nissan.it/content/GB/en/tool/find-dealer.html?location=x" Details: Description| Value ---|--- Patched:| Yes, at 03.10.2015 Latest check for patch:| 03.10.2015 14:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107289 Google Pagerank...

Python IDLE 2.7.8 - Crash (PoC)

!/usr/bin/env python Title : Python IDLE 2.7.8 - Crash Proof Of Concept Website : http://www.python.org/idle/ Tested : Windows 7 / Windows 8.1 Author : Hadi Zomorodi Monavar Email : [email protected] 1 . run python code : python poc.py 2 . open r3z4.txt and copy content to clipboard 3 . open...

Internet Download Manager - Find Download Crash (PoC)

!/⁠usr/⁠bin/⁠env python Title : Internet Download Manager -⁠ Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 /⁠ Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-⁠Mail : meatrezadotes ,...

Internet Download Manager - Find Download Crash (PoC)

Internet Download Manager - Find Download Crash PoC !/⁠usr/⁠bin/⁠env python Title : Internet Download Manager -⁠ Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 /⁠ Server 2008 Author : Mohammad Reza Espargham Linkedin :...

PCRE 'find_fixedlength()' function heap buffer overflow vulnerability

PCRE is a software developer Philip Hazel developed by the use of C language written in open source regular expression library . PCRE suffers from a heap buffer overflow vulnerability that could be exploited by an attacker to crash an affected application or execute arbitrary code...

UBUNTU-CVE-2015-5073

Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...

Lost Your Phone? Google Search 'Find My Phone' To Locate It

How many of you have an issue to forget your mobile phones? I guess, most of us. Sometimes in our homes, sometimes in our offices, sometimes in our cars and sometimes we even don’t remember the exact place where we left our phones. Now, Finding your phone is as simple as searching something on...

Nscan: Fast internet-wide scanner

Nscan: Fast internet-wide scanner Nscan is a fast Network scanner optimized for internet-wide scanning purposes and inspired by Masscan and Zmap. It has it’s own tiny TCP/IP stack and uses Raw sockets to send TCP SYN probes. It doesn’t need to set SYN Cookies so it doesn’t wastes time checking if...

Samsung Insists Find My Mobile Service Safe

Samsung this week tried to quell recent reports that its Find My Mobile service is vulnerable to hacking, firing back at NIST National Institute of Standards and Technology who warned last month that the feature could be exploited. In a blog post on the company’s global blog Tuesday, Samsung...