Microsoft Office RCE Vulnerability

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. A security vulnerability exists in Microsoft Outlook, which arises from a failure of the program to properly handle specially designed e-mai...

Joomla! 3.2.0 - 3.4.4 SQLi Vulnerability - Active Check

Joomla! is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if...

Microsoft Windows TrueType Font Remote Code Execution Vulnerability (CNVD-2015-05361)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows TrueType, which can be exploited by an attacker to take full control of the affected system...

Microsoft Windows OpenType Font Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows OpenType, which can be exploited by an attacker to take full control of an affected system...

Sierra Wireless GX, ES, and LS gateways running ALEOS contain hard-coded credentials

Overview Sierra Wireless GX, ES, and LS gateway devices running ALEOS versions 4.4.1 and earlier contain hard-coded credentials. Description CWE-259: Use of Hard-coded Password - CVE-2015-2897Sierra Wireless GX, ES, and LS gateways running ALEOS contain multiple hard-coded accounts with root...

Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability

The password change functionality in the Cisco Unified MeetingPlace Web Conferencing application could allow an unauthenticated remote, attacker to change the passwords of arbitrary users. The vulnerability is due to the following: Users are not required to enter the previous password during a...

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2015-04706)

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists when Microsoft SQL Server fails to properly handle internal...

Arbitrary Command Execution Vulnerability in Multiple ESET Products

ESET is a world-renowned computer security software company based in Bratislava, Slovakia. An arbitrary command execution vulnerability exists in several ESET products, which allows an attacker to exploit this vulnerability to execute arbitrary commands with root privileges and take full control ...

D-Link DIR-636L has multiple vulnerabilities

The D-Link DIR-636L is a router device. A remote command injection and authentication bypass vulnerability exists in the D-Link DIR636L, which allows an attacker to execute arbitrary commands or bypass the authentication mechanism and take full control of the affected device...

Belkin N750 - 'jump?login' Remote Buffer Overflow

""" Source: https://labs.integrity.pt/articles/from-0-day-to-exploit-buffer-overflow-in-belkin-n750-cve-2014-1635/ A vulnerability in the guest network web interface of the Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router with firmware F9K1103WW1.10.16m, allows an unauthenticated remote attacker ...

Cobham Aviator satellite terminals contain multiple vulnerabilities

Overview Cobham Aviator 700D and 700E satellite terminals contain multiple vulnerabilities. Description Cobham Aviator 700D and 700E satellite communication terminals contain the following vulnerabilities:CWE-327:Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-2942 Please note that th...

Datum Systems satellite modem devices contain multiple vulnerabilities

Overview Datum Systems PSM-4500 and PSM-500 series satellite modem devices contain multiple vulnerabilities Description CWE-220:Sensitive Data Under FTP Root - CVE-2014-2950The Datum Systems SnIP operating system on PSM-4500 and PSM-500 satellite modem devices has FTP enabled by default with no...

phpDEV5 - Remote Default Insecure Users Vuln

No description provided by source. ------------------------------------------------------------------------ PHPDev5 Remote Insecure Default Users & Passwords vuln. By : Ali7 e-mail : [email protected] date : 09-03-2k5 greetz : all my friends ; AlkaeN ; s4a.cc boyz ; Target : PHPDev 5 URL :...

Camtron CMNC-200 IP Camera Authentication Bypass

No description provided by source. Finding 3: Web Based Administration Interface Bypass CVE: CVE-2010-4232 The CMNC-200 IP Camera has an administrative web interface that does not handle authentication properly. Using a properly formatted request, an attacker can bypass the authentication...

Esoftpro Online Guestbook Pro Multiple Vulnerabilities

No description provided by source. Exploit Title: Esoftpro Online Guestbook Pro Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:5.1 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat...

vBulletin install upgrade.php Privilege Escalation (CVE-2013-6129)

A privilege escalation vulnerability has been reported in vBulletin. A remote attacker may exploit this issue by sending a specially crafted POST message to the "install/upgrade.php" component of the server via the customerid, htmldatapassword, htmldataconfirmpassword, and htmldataemail parameter...

PT-2013-1050 · Microsoft · Windows Xp +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Description: The issue exists in the NDProxy component of the Windows kernel due to improper validation of input passed from user mode to the kernel. This...

PT-2013-4201 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote attackers to execute arbitrary code via a malformed asynchronous RPC request. An elevation of privilege vulnerability exists in the way that Windows...

Hornbill Supportworks ITSM 1.0.0 SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Facebook OAuth flaw allows gaining full control over any Facebook account

Facebook OAuth is used to communicate between Applications & Facebook users, to grant additional permissions to your favorite apps. To make this possible, users have to 'allow or accept' the application request so that app can access your account information with required permissions. As a normal...