VFU 4.10-1.1 Stack Buffer Overflow

Author: Provensec http://www.provensec.com Tested on GNU/Linux - Debian Wheezy Description: VFU v4.10-1.1 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker can exploit this issue to execute...

GNUPanel 0.3.5_R4 - Multiple Vulnerabilities

GNUpanel version 0.3.5R4 suffers from cross site request forgery and cross site scripting vulnerabilities. Exploit Title :GNUpanel 0.3.5R4 - Multiple Vulnerabilities Vendor Homepage :http://wp.geeklab.com.ar/gl-en/gnupanel/ GNUPanel Version :0.3.5R4 Server :Centos 6.4 Exploit Author :Necmettin...

CVE-2011-4613

The X.Org X wrapper xserver-wrapper.c in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY...

CVE-2011-4613

The X.Org X wrapper xserver-wrapper.c in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY...

PT-2014-1787

Name of the Vulnerable Software and Affected Versions X.Org X wrapper versions affected versions not specified Debian GNU/Linux affected versions not specified Ubuntu Linux affected versions not specified Description The issue allows local users to bypass intended access restrictions. Multiple...

CVE-2011-4613: Undefined Security Weakness

The X.Org X wrapper xserver-wrapper.c in Debian GNU/Linux and Ubuntu Linux does not properly verify the TTY of a user who is starting X, which allows local users to bypass intended access restrictions by associating stdin with a file that is misinterpreted as the console TTY...

PT-2013-1075

Name of the Vulnerable Software and Affected Versions Munin versions prior to 2.0.18 Description The issue allows remote attackers to cause a denial of service, specifically aborting data collection for a node, by utilizing a plugin with a particular service name, multigraph, as a multigraph...

Veno File Manager Arbitrary File Download

Exploit Title : Veno File Manager Arbitrary File Download Vulnerability Google Dork : allintitle: "Veno File Manager" Date : 10/12/2013 Exploit Author : Daniel Godoy Vendor Homepage :...

PT-2013-1068

Name of the Vulnerable Software and Affected Versions sup versions prior to 0.13.2.1 sup versions 0.14.x prior to 0.14.1.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment. Multiple vulnerabilities in the...

Zend-Framework - Full Info Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title : Zend-Framework Full Info Disclosure Google Dork : inurl:/application/configs/application.ini Date : 26/11/2013 Exploit Author : Ariel Orellana Vendor Homepage : http://framework.zend.com/ Category : Web applications Tested on :...

Zend-Framework - Full Information Disclosure

Zend-Framework - Full Information Disclosure Exploit Title : Zend-Framework Full Info Disclosure Google Dork : inurl:/application/configs/application.ini Date : 26/11/2013 Exploit Author : Ariel Orellana Vendor Homepage : http://framework.zend.com/ Category : Web applications Tested on : GNU/Linu...

Zend-Framework - Full Information Disclosure

Exploit Title : Zend-Framework Full Info Disclosure Google Dork : inurl:/application/configs/application.ini Date : 26/11/2013 Exploit Author : Ariel Orellana Vendor Homepage : http://framework.zend.com/ Category : Web applications Tested on : GNU/Linux CommentGreetz : Daniel Godoy PoC : The...

PT-2013-1088

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux versions affected versions not specified Mozilla Network Security Services NSS versions prior to 3.15.2 Description The issue concerns multiple vulnerabilities in the nss package of Debian GNU/Linux, which can be exploited...

PT-2013-1053

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux affected versions not specified Description The issue concerns multiple vulnerabilities in the nas package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely, potentially leading to...

CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

Code injection

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

CVE-2013-5724

CVE-2013-5724 affects phpBB3 up to version 3.0.11-4 used in Debian GNU/Linux. The issue arises from world-writable permissions on cache files, enabling local users to modify file contents through standard filesystem writes. The vulnerability is localized to systems running the affected phpBB3 pac...

CVE-2013-5724: Undefined Security Weakness

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

CVE-2013-1662

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsbrelease binary in a directory in the PATH, related to use of the popen library function...