Hillstone Software HS TFTP Server 1.3.2 - Denial of Service Vulnerability

No description provided by source. Title : Hillstone Software HS TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.hillstone-software.com/hstftpdetails.htm Advisory : http://secpod.org/blog/?p=419...

@lexPHPTeam @lex Guestbook 3.12 Remote PHP File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11260/info A vulnerability is reported to exist in the @lexPHPTeam @lex Guestbook software that may allow an attacker to include malicious PHP files containing arbitrary code to be executed on a vulnerable system. The iss...

SAP Netweaver Message Server Multiple Vulnerabilities

No description provided by source. 1. Advisory Information Title: SAP Netweaver Message Server Multiple Vulnerabilities Advisory ID: CORE-2012-1128 Advisory URL: http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities Date published: 2013-02-13 Date of last update:...

OfficeSIP Server 3.1 - Denial of Service Vulnerability

No description provided by source. Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461 http://secpod.org/advisories/SecPodExploitOfficeSIPServerDOSVuln.txt...

Cisco ASA DHCPv6 Relay DoS (CSCun45520)

According to its banner, the version of the remote Cisco ASA device is affected by a denial of service vulnerability due to improper validation of packets when the IPv6 for DHCP DHCPv6 relay feature is enabled. An unauthenticated attacker on an adjacent network could cause a denial of service by...

Adobe Flash Player Buffer Overflow Vulnerability (Apr 2014) - Mac OS X

Adobe Flash Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer...

Microsoft Word TextBox Sub-document Memory Corruption - Ver2 (CVE-2007-1910)

A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to improper validation of a supplied value inside the Main Stream. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

IBM Lotus Domino LDAP Server Memory Exception (CVE-2006-0580; CVE-2006-4510)

A denial of service vulnerability exists in the IBM Lotus Domino LDAP Server component. The flaw is caused by improper validation of the user supplied data in an LDAP bind request. An attacker can exploit this vulnerability to terminate the target server which causes a denial of service condition...

CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities 1. Advisory Information Title: Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities Advisory ID: CORE-2014-0002 Advisory URL:...

Coinbase: Improper Validation of the Referrer header leading to Open URL Redirection

Using a proxy tool such as Burp, set the Target as https://coinbase.com. Then, send the following request: GET /cdn-cgi/l/chkjschl HTTP/1.1 Host: coinbase.com Referer: http://attacker.com Content-Length: 2 Notice the attacker's domain in the Referrer header. This value is not being validated on t...

Horde 3.1.x <= 5.1.1 RCE Vulnerability - Active Check

Horde is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware...

Firefox ESR 24.x < 24.4 Multiple Vulnerabilities

The installed version of Firefox ESR 24.x is a version prior to 24.4. It is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist that could lead to arbitrary code execution. CVE-2014-1493, CVE-2014-1494 - A flaw exists in the checkHandshake function due to...

PostgreSQL Database geo_ops path_in Integer Overflow (CVE-2014-0064)

An integer overflow vulnerability has been found in PostgreSQL Database. The vulnerability is due to improper validation when processing a large number of points for a geometric data type. A remote authenticated attacker could exploit this vulnerability by sending malicious information to a table...

POSH Multiple Vulnerabilities

POSH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.804244...

Cisco Prime Infrastructure Command Execution Vulnerability

A vulnerability in Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands with root-level privileges. The vulnerability is due to improper validation of URL requests. An attacker could exploit this vulnerability by requesting an unauthorized command...

Exploit for Improper Certificate Validation in Apple Iphone_Os

OS X/iOS SSL Flaw POC Overview This repository contains s...

Joomla ofc_upload_image.php Unrestricted File Upload (CVE-2009-4140)

A remote code execution vulnerability has been reported in Joomla. The vulnerability is due to improper validation. A remote attacker can exploit this issue by uploading a specially crafted php file to the target...

Core FTP Server < 1.2 Build 508 lstrcpy Overflow Code Execution

The version of Core FTP running on the remote host is prior to 1.2 build 508. It is, therefore, affected by buffer overflow conditions in the RegQueryValueExA and lstrcpy functions due to improper validation of user-supplied input when reading data from the config.dat file and/or from the Windows...

Google Chrome CSRF Vulnerability - Linux

Google Chrome is prone to a cross-site request forgery CSRF attack. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome...

Shadowbox <= 3.0.3 LFI Vulnerability - Active Check

Shadowbox is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...