XiongMai uc-httpd Directory Traversal Vulnerability

XiongMai uc-httpd is a HTTP protection program for cameras and other products from XiongMai. A directory traversal vulnerability exists in XiongMai uc-httpd. A remote attacker can send a 'GET ... /' HTTP request to exploit the vulnerability to read arbitrary files...

DEBIAN-CVE-2017-14991

The sgioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SGGETREQUESTTABLE ioctl call for /dev/sg0...

UBUNTU-CVE-2017-14991

The sgioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SGGETREQUESTTABLE ioctl call for /dev/sg0...

PT-2017-13808

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.4 Description The issue allows local users to obtain sensitive information from uninitialized kernel heap-memory locations. This is achieved via an SG GET REQUEST TABLE ioctl call for /dev/sg0, specifically...

CVE-2015-8707

Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field...

CVE-2015-8707: Exposure of Sensitive Information to an Unauthorized Actor

Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field...

CVE-2015-8707

CVE-2015-8707 (Magento) affects Magento CE < 1.9.2.2 and Magento EE

Trend Micro Control Manager importFile directory traversal

Added: 09/25/2017 BID: 96131 Background Trend Micro Control Manager streamlines administration of Trend Micro security solutions. Problem A directory traversal vulnerability in the importFile.php script allows remote attackers to upload files containing arbitrary PHP script under the document roo...

Disk Pulse Enterprise 9.9.16 - GET Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Disk Pulse Enterprise GET Buffer Overflow', 'Description' = %q This module exploits an SEH buffer overflow in Disk Pulse Enterprise 9.9.16. If a...

Attackers Use Undocumented MS Office Feature to Leak System Profile Data

An undocumented Microsoft Office feature allows attackers to gather sensitive configuration details on targeted systems simply by tricking recipients to open a specially crafted Word document—no VBA macros, embedded Flash objects or PE files needed. The undocumented feature is being used by...

Carlo Gavazzi Powersoft 2.1.1.1 Directory Traversal

require 'msf/core' class MetasploitModule 'Carlo Gavazzi Powersoft Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carlo Gavazzi Powersoft 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', 'http://gleg.net/agorascadaupd.shtml'...

Carel PlantVisor 2.4.4 Directory Traversal

require 'msf/core' class MetasploitModule 'Carel Pl@ntVisor Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carel Pl@ntVisor 'james fitts' , 'License' = MSFLICENSE, 'References' = 'CVE', '2011-3487' , 'BID', '49601' , , 'DisclosureDate' =...

Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure Exploit

Exploit for windows platform in category web applications require 'msf/core' class MetasploitModule 'Carlo Gavazzi Powersoft Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carlo Gavazzi Powersoft 'james fitts' , 'License' = MSFLICENSE,...

Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure (Metasploit)

Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure Metasploit require 'msf/core' class MetasploitModule 'Carlo Gavazzi Powersoft Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carlo Gavazzi Powersoft 'james fitts' ,...

Carlo Gavazzi Powersoft 2.1.1.1 - Directory Traversal File Disclosure (Metasploit)

require 'msf/core' class MetasploitModule 'Carlo Gavazzi Powersoft Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability found in Carlo Gavazzi Powersoft 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', 'http://gleg.net/agorascadaupd.shtml'...

Cross site request forgery (csrf)

EE 4GEE WiFi MBB before EE600005.0031 devices have XSS in the smscontent parameter in a getSMSlist request...

CVE-2017-13708

Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request...

Buffer overflow

Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request...

CVE-2017-13708

Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request...

PT-2017-13034

Name of the Vulnerable Software and Affected Versions VX Search Enterprise version 10.0.14 Description A buffer overflow issue exists in the web server service, allowing remote attackers to execute arbitrary code via a crafted GET request. Recommendations For VX Search Enterprise version 10.0.14,...