Getdpd Bug Bounty #6 - (Import) Persistent Vulnerability

Document Title: =============== Getdpd Bug Bounty 6 - Import Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1718 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1718...

Getdpd Bug Bounty #6 - (Import) Persistent Vulnerability

Document Title: =============== Getdpd Bug Bounty 6 - Import Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1718 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1718...

FTPShell Client 5.24 Buffer Overflow

++++++++++++++++++++++++ + Exploit Title: FTPShell Client Add New Folder Local Buffer Overflow + Date: 2/2/2016 +Exploit Author: Arash Khazaei + Vendor Homepage: www.ftpshell.com +Software Link: http://www.ftpshell.com/download.htm + Version: 5.24 + Tested on: Windows XP Professional SP3 Version...

SUSE-SU-2016:0347-1 Security update for curl

This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer bsc962983 The following non-security bugs were fixed: -...

[slackware-security] MPlayer

New MPlayer packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/MPlayer-1.220160125-i486-1slack14.1.txz: Upgraded. This is the latest MPlayer-1.2 branch, identical to the...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-38.6.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

FTPShell Client 5.24 - (Create NewFolder) Local Buffer Overflow

Exploit for windows platform in category local exploits ++++++++++++++++++++++++ + Exploit Title: FTPShell Client Add New Folder Local Buffer Overflow + Date: 2/2/2016 +Exploit Author: Arash Khazaei + Vendor Homepage: www.ftpshell.com +Software Link: http://www.ftpshell.com/download.htm + Version...

VK.com: Внедрение внешних сущностей в функционале импорта пользователей YouTrack

Уязвимость существует из-за возможности использования внешних сущностей XML разметки в функционале импорта пользователей YouTrack. Веб-приложение доступно по адресу youtrack.vk-cdn.net Исходя из документации https://confluence.jetbrains.com/display/YTD6/Import+Users поддерживает импорт данных...

Oracle 9i XDB FTP Pass Overflow

''' Oracle 9i XDB FTP PASS Overflow win32 Ported to python from the Metasploit oracle9ixdbftppass.rb exploit Original exploit: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/oracle9ixdbftppass.rb Description from original exploit: By passing an overly long...

XXEinjector - Tool For Automatic Exploitation Of XXE Vulnerability

XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file Mandatory - fil...

php: Security update (7 CVEs)

The php package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 5.6.8-1 = 5.6.17-1 CHANGELOG Sun, 24 Jan 2016 21:47:52 +0100 18d121b Update to 5.6.17 Fixes CVE-2016-1903. Wed, 23 Dec 2015 16:00:14 -0500 766cfcc Update to 5.6.16 Wed, ...

Knoica Minolta FTP CWD命令缓冲区溢出漏洞

No description provided by source...

V3n0M-Scanner - Popular SQLi and Pentesting Scanner

V3n0M runs on Python3 Live Project - Readding old features back in and improved for Python3 v3n0m is a free and open source scanner. Evolved from baltazar's scanner, it has adapted several new features that improve fuctionality and usability. It is mostly experimental software. This program is fo...

Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)

Konica Minolta FTP Utility 1.00 - CWD Command Overflow SEH Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow. Date : 01/08/2016 Author: TOMIWA. Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Software: Konica Minolta FTP Utility v1.0 Tested:...

Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)

Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow. Date : 01/08/2016 Author: TOMIWA. Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Software: Konica Minolta FTP Utility v1.0 Tested: Windows 7 SP1 64bits Listen for a reverse netcat connection...

Office Document Reader 5.1.13 XSS / CSRF

Hello list! Happy New Year! There are multiple vulnerabilities in Office Document Reader for iOS. There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities. Earlier I've informed developer of Office Document Reader about this and other his software. -------------------------...

FreeFloat FTP BYE Command Buffer Overflow

No description provided by source...

Ubuntu NetKit FTP Client Local Denial of Service Vulnerability

Ubuntu NetKit FTP Client is a set of client command line tools for ftp in linux systems. A denial of service vulnerability exists in Ubuntu NetKit FTP Client. An attacker can exploit this vulnerability to cause a denial of service...

FTPShell Client 5.24 - Local Buffer Overflow

''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTPSHELL-v5.24-BUFFER-OVERFLOW.txt Vendor: ================================ www.ftpshell.com Product: ================================ FTPShell Client version 5.24 FTPShell client is ...

CVE-2015-7665

Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a 1 PORT or 2 EPRT command. NOTE: within wget itself, the automatic fallback is not considered a...