2955 matches found
Cisco Prime Infrastructure Command Execution Vulnerability
A vulnerability in Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands with root-level privileges. The vulnerability is due to improper validation of URL requests. An attacker could exploit this vulnerability by requesting an unauthorized command...
Exploit for Improper Certificate Validation in Apple Iphone_Os
OS X/iOS SSL Flaw POC Overview This repository contains s...
Joomla ofc_upload_image.php Unrestricted File Upload (CVE-2009-4140)
A remote code execution vulnerability has been reported in Joomla. The vulnerability is due to improper validation. A remote attacker can exploit this issue by uploading a specially crafted php file to the target...
Core FTP Server < 1.2 Build 508 lstrcpy Overflow Code Execution
The version of Core FTP running on the remote host is prior to 1.2 build 508. It is, therefore, affected by buffer overflow conditions in the RegQueryValueExA and lstrcpy functions due to improper validation of user-supplied input when reading data from the config.dat file and/or from the Windows...
Google Chrome CSRF Vulnerability - Linux
Google Chrome is prone to a cross-site request forgery CSRF attack. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome...
Shadowbox <= 3.0.3 LFI Vulnerability - Active Check
Shadowbox is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation...
WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload
WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/65060/info The Global Flash Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly...
OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation...
OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation...
WebPagetest 'file' parameter Local File Disclosure Vulnerability
WebPagetest is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TYPO3 <= 6.1.5 Multiple Directory Traversal Vulnerabilities
TYPO3 is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...
FreeSWITCH 'switch_regex.c' Multiple Buffer Overflow Vulnerabilities
FreeSWITCH is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VLC Media Player Multiple Vulnerabilities - July 13 (Windows)
This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - July 13 Windows Authors: Arun Kallavi Copyright: Copyright ...
VLC Media Player Multiple Vulnerabilities (Jul 2013) - Windows
VLC Media Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videolan:vlcmediaplayer";...
Fail2ban 0.8.9, Denial of Service (Apache rules only)
Version 0.8.9 latest of Fail2ban allows to perform remote denial of service for arbitrary chosen IP address. Address listed on Fail2ban's whitelist are not affected. The vulnerability exists in Apache rules and it is caused by improper validation of a log file by regular expression. Malicious use...
Motion Camera Video Signal Monitor Multiple Vulnerabilities
This host is installed with Motion Video Signal Monitor and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmotioncamvideosigmonmultvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Motion Camera Video Signal Monitor Multiple Vulnerabilities Authors: Thanga Prakash S...
Motion Camera Video Signal Monitor Multiple Vulnerabilities
Motion Video Signal Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Elemata CMS SQLi Vulnerability
Elemata CMS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2013-41: Arbitrary Code Execution in Ajax File and Image Manager
The specialists of the Positive Research center have detected "Arbitrary Code Execution" vulnerability in Ajax File and Image Manager. Due to incorrect application architecture, validation of file extension is implemented after uploading file. Uploaded file will subsequently be removed if its...