2514 matches found
Cisco Firewall Services Module Command Authorization Vulnerability
A vulnerability in the authorization code of the Cisco Firewall Services Module FWSM could allow an authenticated but unprivileged, local attacker to delete, modify, or view the configuration of any other context of the affected system. The vulnerability is due to insufficient authorization...
Oracle Java Runtime Environment ShortComponentRaster.verify Memory Corruption (CVE-2013-2472)
A memory corruption vulnerability exists in Oracle's Java Runtime. The vulnerability is due to insufficient input validation on ShortComponentRaster.verify method parameters which will lead to bypassing of "dataOffsets0" boundary checks when the "numDataElements" field is 0. A remote attacker can...
[SECURITY] Fedora 18 Update: nodejs-couch-login-0.1.17-1.fc18
A module for doing logged-in requests to a couchdb server...
CVE-2013-2460
creationtimestamp| type| source ---|---|--- 2013-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26529 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/javajre17providerskeleton.rb 2025-02-06...
phpMyAdmin -- Global variable scope injection
The phpMyAdmin development team reports: The import.php script was vulnerable to GLOBALS variable injection. Therefore, an attacker could manipulate any configuration parameter. This vulnerability can be triggered only by someone who logged in to phpMyAdmin, as the usual token protection prevents...
CVE-2013-3956
creationtimestamp| type| source ---|---|--- 2013-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26452 2013-07-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27191 2018-05-29 15:50:33+00:00| seen|...
HP ProCurve 1700 series switches vulnerable to cross-site request forgery
Overview ProCurve 1700 series switches provided by Hewlett-Packard contain a cross-site request forgery vulnerability. Darren Willis of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
Multiple Cybozu products vulnerable to cross-site request forgery
Overview Multiple Cybozu products contain a cross-site request forgery vulnerability. Impact If a user accesses a specially crafted URL while logged in, user passwords or administrator passwords may be altered. Solution Update the Software Update to the latest version according to the information...
Multiple Vulnerabilities in KrisonAV CMS
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in KrisonAV CMS, which can be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-Site Scripting XSS vulnerability in KrisonAV CMS: CVE-2013-2712 The vulnerability exists due to...
Cybozu Garoon vulnerable to SQL injection
Overview Cybozu Garoon contains an SQL injection vulnerability. Cybozu Garoon provided by Cybozu is a groupware. Cybozu Garoon contains an SQL injection vulnerability. Ken Asai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
Welcart vulnerable to cross-site request forgery
Overview Welcart contains a cross-site request forgery vulnerability. Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site request forgery vulnerability. Yoshinori Matsumoto of Kobe Digital Lab., Inc. reported this vulnerability to IP...
Microsoft Windows Authenticated Logged In Users Enumeration
This module uses a valid administrator username and password to enumerate users currently logged in, using a similar technique than the "psexec" utility provided by SysInternals. It uses reg.exe to query the HKU base registry key. This module requires Metasploit: https://metasploit.com/download...
Contao 2.11.6 Path Disclosure
title: Contao 2.11.6 Multiple vulnerabilities vulnerable version: 2.11.6 impact: medium homepage: www.contao.org found: 23.10.2012 by: aulmn Vendor description: Contao is an open source content management system CMS for people who want a professional internet presence that is easy to maintain...
OpenDocMan 1.2.6.1 - Cross-Site Request Forgery (Password Change)
OpenDocMan 1.2.6.1 - Cross-Site Request Forgery Password Change Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link:...
CVE-2012-2770
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...
CVE-2012-2770
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...
CVE-2012-2770
The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...
PT-2012-4246
Name of the Vulnerable Software and Affected Versions Authen::ExternalAuth extension versions prior to 0.11 Description The issue allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user." Recommendations For versions prior to 0.1...
vBulletin 4.1.12 SQL Information Disclosure
No description provided by source. TITLE ....... vBulletin 4.1.12 - sql information leak for logged-in users DATE ........ 03.05.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP...
vBulletin 4.1.12 Path Disclosure
TITLE ....... vBulletin 4.1.12 - information disclosure for logged in users DATE ........ 30.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://vbulletin.com VERSION ..... TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is thi...