9763 matches found
CVE-2014-0805: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the NeoFiler application 5.4.3 and earlier, NeoFiler Free application 5.4.3 and earlier, and NeoFiler Lite application 2.4.2 and earlier for Android allows attackers to overwrite or create arbitrary files via unspecified vectors...
TP-Link 150M Wireless Lite N Router Denial Of Service
Exploit title: 150M Wireless Lite N Router HTTP DoS Date: 11/29/2013 Exploit Author: Dino Caus Hardware Link: http://www.tp-link.com/en/products/details/?model=TL-WR740N Vendor Homepage: http://www.tp-link.com/ Contact: dincaus at gmail.com Firmware Version: 3.12.11 Build 120320 Rel.51047n...
VideoSpirit Lite 1.77 Seh Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested o...
VideoSpirit Lite 1.77 SEH Buffer Overflow
!/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN ''' sleep3...
VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH)
!/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN ''' sleep3...
spider contact lite, sqli
spider contact lite , , as per http://vel.joomla.org/vel-blog/976-spider-contacts-1-3-3.html Extension Update Details We have fixed the vulnerability on Spider Contacts Lite. We have changed the version to 1.3.4 on JED and also added corresponding text to the description. UpdateNoticeURL...
CVE-2013-5977
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
CVE-2013-5977
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
CVE-2013-5977
The CVE-2013-5977 issue is a CSRF vulnerability in the Cart66 Lite WordPress plugin (Cart66Product.php) affecting versions before 1.5.1.15. It allows remote attackers to hijack administrator authentication for requests to wp-admin/admin.php that create/modify products and can enable XSS via the P...
CVE-2013-5977
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
PT-2013-5899
Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.1.15 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to create or modify products, or conduct...
CVE-2013-5977: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
Scientific Linux Security Update : ccid on SL5.x i386/x86_64 (20130930)
An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon root, by default, by inserting a...
eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability
Title: ====== eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability Date: ===== 2013-08-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1064 VL-ID: ===== 1064 Common Vulnerability Scoring System: ==================================== 3.8 Introduction:...
eTransfer Lite 1.0 Cross Site Scripting
Title: ====== eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability Date: ===== 2013-08-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1064 VL-ID: ===== 1064 Common Vulnerability Scoring System: ==================================== 3.8 Introduction:...
eTransfer Lite - file name HTML Injection
eTransfer Lite - file name HTML Injection source: https://www.securityfocus.com/bid/62313/info eTransfer Lite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected...
eTransfer Lite - 'file name' HTML Injection
source: https://www.securityfocus.com/bid/62313/info eTransfer Lite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to...
eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability
Document Title: =============== eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1064 Release Date: ============= 2013-08-30 Vulnerability Laboratory ID VL-ID: ===================================...
eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability
Document Title: =============== eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1064 Release Date: ============= 2013-08-30 Vulnerability Laboratory ID VL-ID: ===================================...