3162 matches found
CVE-2011-5078
The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...
MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable. M-SEARCH HTTP/1.1 Host:239.255.255.250:1900...
M-Player 0.4 Local Denial of Service Vulnerability
Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file=...
M-Player 0.4 - Local Denial of Service
M-Player 0.4 - Local Denial of Service !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file= "Crash.mp3"; my...
M-Player 0.4 Denial Of Service
EDB-ID: 18337 CVE: N/A OSVDB-ID: N/A Author: JaMbA Published: 2012-01-08 Verified: Not Verified Exploit Code: Download Vulnerable App: Download Rating Overall: 1 2 3 4 5 0.0 Prev Home Next !/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author:...
M-Player 0.4 - Local Denial of Service
!/usr/bin/perl Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability Date: 08/01/2012 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml Version: 0.4 Tested on: Windows 7 my $file= "Crash.mp3"; my $junk= "\x41" x 2048; open$FILE,"$file";...
帝国(EmpireCMS)cms 6.6 后台拿shell
简要描述： 以前6.5的有人发的方法是，（进入后台---系统设置---管理数据表---管理系统模型---导入新型模块,直接把修改过的php的shell改名为shell.php.mod上传，新版使用uploadmnum.php来递增数字） 详细说明： 以前6.5的有人发的方法是，（进入后台---系统设置---管理数据表---管理系统模型---导入新型模块,直接把修改过的php的shell改名为shell.php.mod上传，新版使用uploadmnum.php来递增数字）发现6.6不行，上传之后会变成类似uploadm1324885505nXmTdQamQq.php这样的！ 漏洞证明：...
Sybase M-Business Anywhere两个权限提升漏洞
Sybase 的M-Business Anywhere 可以提供一个移动内容和应用程序平台，将基于Web的移动内容和应用程序传送至移动设备。 Sybase M-Business Anywhere在实现上存在两个未明细节的漏洞，可被恶意用户利用获取提升的权限。 Sybase Sybase M-Business Anywhere 7.x Sybase Sybase M-Business Anywhere 6.x 厂商补丁： Sybase ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sybase.com/...
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE including Trinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !
700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE includingTrinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...
StudioLine Photo Basic 3.70.34.0 Insecure Method
Vulnerability ID: HTB23024 Reference: http://www.htbridge.ch/advisory/studiolinephotobasic3activexcontrolinsecuremethod.html Product: StudioLine Photo Basic 3 Vendor: H&M Software http://studioline.biz Vulnerable Version: 3.70.34.0 and probably prior Tested on: 3.70.34.0 Vendor Notification: 15...
Sybase M-Business Anywhere agSoap.exe Buffer Overflow
A heap buffer overflow has been reported in Sybase M-Business Anywhere. M-Business Anywhere is a mobile applications development, deployment and management platform. The vulnerability is due to a boundary error in the server while handling specially crafted SOAP requests. A remote attacker could...
Sybase M-Business Anywhere (AvantGo) SOAP Server Detection
The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...
Sybase M-Business Anywhere (AvantGo) gsoap Module password Tag Handling Overflow
The Sybase M-Business Anywhere AvantGo software installed on the remote host includes a SOAP server that fails to validate an XML end tag in a SOAP request, resulting in a buffer overflow. An unauthenticated, remote attacker can exploit this to execute arbitrary code. This plugin checks the heap...
Sybase M-Business Anywhere (AvantGo) Sync Server Detection
The remote service is a Sybase M-Business Anywhere formerly AvantGo Sync Server, which handles synchronization requests from a mobile device and determines whether to obtain requested pages from the source web server or from a shared cache on the Sync Server itself. C Tenable Network Security, In...
Sybase M-Business Anywhere multiple security vulnerabilities
Buffer overflows during web access authentication TCP/80, TCP/443, buffer overflow on SOAP request processing TCP/8093, TCP/8094...
Sybase M-Business Anywhere agSoap.exe password Tag Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gsoap.exe module exposed by the webserver that listens by default on TC...
Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase M-Business Anywhere. Authentication is not required to exploit this vulnerability. The specific flaw exists within agsync.dll, which listens for SOAP and sync HTTP requests on ports 80 and 4...
Sybase M-Business Anywhere Server agd.exe encodeUsername Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase MBusiness Anywhere. Authentication is not required to exploit this vulnerability. The flaw exists within the agd.exe component which listens by default on TCP port 80 and 443. When calling...
