4275 matches found
PT-2014-3285
Name of the Vulnerable Software and Affected Versions PHPFox versions 3.7.3 through 3.7.5 Description The issue allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication. This is achieved by sending a request with a modified valitem id...
PDF Album 1.7 iOS - Local File Inclusion
Document Title: =============== PDF Album v1.7 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1255 Release Date: ============= 2014-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 1255...
UBUNTU-CVE-2014-0049
Buffer overflow in the completeemulatedmmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancelworkitem data...
PT-2014-1874
Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17 Description The issue affects memcached, allowing remote attackers to cause problems with the confidentiality, integrity, and availability of protected information. A specific problem is in the do item get...
NoticeBoardPro 1.x SQL Injection
Author: TUNISIAN CYBER + Exploit Title: NoticeBoardPro v1.X SQL Injection vulnerability + Date: 27-12-2013 + Category: WebApp + Google Dork: n/a + Tested on: KaliLinux + Vendor: http://www.noticeboardpro.com/ +Description: NoticeBoardPro is an online, web-based, notice / bulletin board system...
CVE-2013-2652: Improper Neutralization of Input During Web Page Generation
CRLF injection vulnerability in help/helplanguage.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter...
PT-2013-3869
Name of the Vulnerable Software and Affected Versions WebCollab versions 3.30 and earlier Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. This is achieved via the item parameter in the help/help language.php file...
DEBIAN-CVE-2013-2186
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance...
commons-fileupload: Arbitrary file upload via deserialization
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance...
Dell PacketTrap PSA 7.1 - Multiple Web Vulnerabilities
Document Title: =============== Dell PacketTrap PSA 7.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=790 Release Date: ============= 2013-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 790...
Google Adds Feature to Keep Malware Out of Chrome Web Store
Google is adding more security controls to its browser-based Chrome Web Store by adding a new application-vetting feature called ‘Enhanced Item Validation.’ For all intents and purposes, the search giant claims that the new policy will only impact application developers in that they will have to...
Veeam Explorer for SharePoint - Item Restore Fails Due to SQL Express Database Size Limitation
Challenge When performing a SharePoint item restore using Veeam Explore for Microsoft Sharepoint, the following error occurs: CREATE DATABASE or ALTER DATABASE failed because the resulting cumulative database size would exceed your licensed limit of 10240 MB per database or CREATE DATABASE or ALT...
DEBIAN-CVE-2013-4080
The dissectr3upstreamcommandqueryconfig function in epan/dissectors/packet-assar3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service infinite loop, and CPU and memory consumption...
UBUNTU-CVE-2013-4080
The dissectr3upstreamcommandqueryconfig function in epan/dissectors/packet-assar3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service infinite loop, and CPU and memory consumption...
Ecshop后台getshell-2
简要描述： 非模板，非sql!!!!!!! 详细说明： 后台可以编辑语言项，并且语言项中有部分是双引号，所以可以通过 $phpinfo 这种格式直接执行php代码，getshell!!这里为了方便演示，使用phpinfo，实际情况可以换成一句话） 语言文件有双引号 后台可以编辑语言文件，插入特殊格式php代码。 此处编辑的是“gzip已禁用”这段文字，所以几乎所有页面都有php代码，首页都有了。 漏洞证明：...
CVE-2013-3535
Multiple cross-site scripting XSS vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 adminemail, 2 headertitle, 3 sitetitle parameter to admin/settings; 4 recaptchaprivate or 5 recaptchapublic parameter to admin/captchasettings; 6...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 adminemail, 2 headertitle, 3 sitetitle parameter to admin/settings; 4 recaptchaprivate or 5 recaptchapublic parameter to admin/captchasettings; 6...
PT-2013-4465
Name of the Vulnerable Software and Affected Versions CMSLogik versions 1.2.0 through 1.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters, including adm...
Vulnerability in "Fujitsu Desktop Update" (for Windows)
Hi @ll, Fujitsu's update utility "Fujitsu Desktop Update" see http://support.ts.fujitsu.com/DeskUpdate/Index.asp, which is factory-preinstalled on every Fujitsu Siemens PC with Windows, has a vulnerability which allows the execution of a rogue program in the security context of the current user...
