Lucene search
+L

95 matches found

Tenable Nessus
Tenable Nessus
added 2015/11/04 12:0 a.m.205 views

Mac OS X EFI Function Execution Vulnerability (EFI Security Update 2015-002)

The remote Mac OS X host is running an EFI firmware version that is affected by a function execution vulnerability due to an issue with handling EFI arguments. An unauthenticated, remote attacker can exploit this to execute arbitrary functions via unspecified vectors. TRUSTED...

7.5CVSS8.9AI score0.01838EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2015/07/14 12:0 a.m.70 views

SQL Injection, Reflected XSS, Path Traversal, Function Execution in ZenPhoto 1.4.8

Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version: 1.4.9 Risk: Medium Vendor Contacted: 2015-05-18 Vendor Fix: 2015-07-09 Public Disclosure: 2015-07-10 SQL Injection...

0.7AI score
SaveExploits0
Hacker One
Hacker One
added 2015/03/31 12:0 a.m.21 views

Internet Bug Bounty: php_stream_url_wrap_http_ex() type-confusion vulnerability

https://bugs.php.net/bug.php?id=69337 Description: ------------ phpstreamurlwraphttpex creates a $httpresponseheader array variable in the local execution scope which may be the global scope. Then it gets a pointer to this variable, and throughout the function's execution accesses it multiple...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2015/03/25 12:0 a.m.34 views

WordPress Marketplace 2.4.0 Add Administrator

!/usr/bin/python Exploit Name: WP Marketplace 2.4.0 Remote Command Execution Vulnerability discovered by Kacper Szurek http://security.szurek.pl Exploit written by Claudio Viviani -------------------------------------------------------------------- The vulnerable function is located on...

0.6AI score
SaveExploits0
zdt
zdt
added 2011/03/31 12:0 a.m.48 views

Pligg CMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2011/03/30 12:0 a.m.40 views

Pligg CMS 1.1.3 - Multiple Vulnerabilities

Pligg CMS 1.1.3 - Multiple Vulnerabilities Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable;...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2011/03/30 12:0 a.m.31 views

Pligg CMS 1.1.3 - Multiple Vulnerabilities

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...

5.3AI score
SaveExploits0
myhack58
myhack58
added 2009/11/30 12:0 a.m.28 views

udf. dll in the php mention the right of the specific application-vulnerability warning-the black bar safety net

A, function: using MYSQL custom function-again statement: the use of MYSQL UDFS providing the right to not be overflow, but MYSQL itself a function of the MYSQL account into the system with system privileges. Second, applicable occasions: 1. The target system is a WindowsWin2000,XP,Win2003; 2.the...

8.1AI score
SaveExploits0
zdt
zdt
added 2009/05/20 12:0 a.m.49 views

Jorp 1.3.05.09 Remote Arbitrary Remove Projects/Tasks Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Jorp 1.3.05.09 Remote Arbitrary Remove Projects/Tasks Vulnerabilities =====================================================================...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.32 views

Mandriva Update for postgresql MDKSA-2007:188 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:188 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

10CVSS0.2AI score0.2549EPSS
SaveExploits3References2
OSV
OSV
added 2006/01/09 11:3 p.m.6 views

DEBIAN-CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

7.5CVSS8AI score0.13065EPSS
SaveExploits2References1
NVD
NVD
added 2005/11/01 12:47 p.m.17 views

CVE-2005-3405

ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the 1 asc or 2 desc parameters set, possibly due to an eval injection vulnerability...

7.5CVSS7.8AI score0.08074EPSS
SaveExploits2References8
securityvulns
securityvulns
added 2003/02/22 12:0 a.m.64 views

[SCSA-006] XSS & Function Execution Vulnerabilities in Nuked-Klan

Security Corporation Security Advisory SCSA-006 PROGRAM: Nuked-Klan HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: beta 1.3 DESCRIPTION Nuked Klan is a PHP Gateway for "clans". direct quote from Nuked Klan website DETAILS & EXPLOITS Many Cross-Site Scripting vulnerabilities have been...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2001/01/10 12:0 a.m.35 views

Borland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Password

source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account will eliminate all implemented security allowing full...

10CVSS5.8AI score0.13307EPSS
SaveExploits2
securityvulns
securityvulns
added 2000/07/28 12:0 a.m.45 views

Дырка в Excel 2000

С помощью функции REGISTER.ID можно выполнить любую функцию любой динамической библиотеки...

0.4AI score
SaveExploits0References3Affected Software2
Rows per page
Query Builder