526 matches found
PT-2017-3915
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the rsvp obj print function in print-rsvp.c of the tcpdump utility. This can allow a remote attacker to cause a denial of service or potentially gain...
Post Pay Counter < 2.731 - PHP Obj Injection & Access Control Issues
The Post Pay Counter WordPress plugin was affected by a PHP Obj Injection & Access Control Issues security vulnerability...
PT-2017-12895
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...
UBUNTU-CVE-2016-7147
Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the objids:tokens parameter...
PYSEC-2017-64
Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the objids:tokens parameter...
Jenkins-LDAP (CVE-2016-9299) deserialization vulnerability analysis-vulnerability warning-the black bar safety net
Source: gone with the wind's Blog Author: iswin This vulnerability in the last 11 month of official release announcement when I was concerned too, when he was looking for com. sun. jndi. ldap. LdapAttribute this class related to the deserialization was aware of this category inside the...
PT-2017-9094
Name of the Vulnerable Software and Affected Versions Plone versions prior to 4.3.12 Plone versions 5.x prior to 5.0.7 Description A cross-site scripting XSS issue exists in the manage findResult component of the search feature in Zope ZMI, allowing remote attackers to inject arbitrary web script...
PT-2016-3416
Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2h and earlier Description The issue is related to a denial of service caused by an out-of-bounds read and application crash. This can be triggered by a remote attacker via a crafted time-stamp file that is mishandled by t...
PT-2014-1699
Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8 through 0.9.8zb OpenSSL versions 1.0.0 through 1.0.0n OpenSSL versions 1.0.1 through 1.0.1i Description The issue arises from the OBJ obj2txt function in OpenSSL when pretty printing is used, as it does not ensure the...
Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability
No description provided by source. =================================================================== Opencourrier 2.03beta RFI/LFI Multiple File Include Vulnerability =================================================================== + Opencourrier 2.03beta RFI/LFI Multiple File Include...
Microsoft Excel - OBJ Record Stack Overflow
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/ http://www.exploit-db.com/sploits/moaub-24-excel-exploit.zip...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft Excel OBJ Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-0822)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
PT-2013-2661
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is caused by multiple integer overflows in the process frame obj function, which can be triggered by crafted image dimensions in LucasArts Smush video data. This leads to an out-of-bounds...
PT-2013-2583
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 18.0 Firefox ESR versions prior to 17.0.2 Thunderbird versions prior to 17.0.2 Thunderbird ESR versions prior to 17.0.2 SeaMonkey versions prior to 2.15 Description The issue is related to a use-after-free...
Microsoft Office Excel Malformed OBJ Record Handling Overflow(MS11-038)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...
Microsoft Excel - Malformed OBJ Record Handling Overflow (MS11-038) (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Microsoft Excel OBJ Record Stack Overflow
Exploit for windows platform in category local exploits ========================================= Microsoft Excel OBJ Record Stack Overflow ========================================= Title : Microsoft Excel OBJ Record Stack Overflow Version : Excell 2002 and XP SP3 Analysis : http://www.abysssec.c...