339 matches found
Blog2Social <= 5.0.0 - PHP Obj Injection
The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin was affected by a PHP Obj Injection security vulnerability...
Double free
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-14524
dwgdecodeeed in decode.c in GNU LibreDWG before 0.6 leads to a double free in dwgfreeeed in free.c because it does not properly manage the obj-eed value after a free occurs...
CVE-2018-13622
The mintToken function of a smart contract implementation for ObjectToken OBJ, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-1000042
Security Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web reques...
PT-2017-3915
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the rsvp obj print function in print-rsvp.c of the tcpdump utility. This can allow a remote attacker to cause a denial of service or potentially gain...
Post Pay Counter < 2.731 - PHP Obj Injection & Access Control Issues
The Post Pay Counter WordPress plugin was affected by a PHP Obj Injection & Access Control Issues security vulnerability...
UBUNTU-CVE-2016-7147
Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the objids:tokens parameter...
PYSEC-2017-64
Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the objids:tokens parameter...
Jenkins-LDAP (CVE-2016-9299) deserialization vulnerability analysis-vulnerability warning-the black bar safety net
Source: gone with the wind's Blog Author: iswin This vulnerability in the last 11 month of official release announcement when I was concerned too, when he was looking for com. sun. jndi. ldap. LdapAttribute this class related to the deserialization was aware of this category inside the...
Microsoft Excel - OBJ Record Stack Overflow
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/ http://www.exploit-db.com/sploits/moaub-24-excel-exploit.zip...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Opencourrier 2.03beta (RFI/LFI) Multiple File Include Vulnerability
No description provided by source. =================================================================== Opencourrier 2.03beta RFI/LFI Multiple File Include Vulnerability =================================================================== + Opencourrier 2.03beta RFI/LFI Multiple File Include...
Microsoft Excel OBJ Record Stack Overflow (MS10-038) - Ver2 (CVE-2010-0822)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...
Microsoft Office Excel Malformed OBJ Record Handling Overflow(MS11-038)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft Excel - Malformed OBJ Record Handling Overflow (MS11-038) (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...
MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Microsoft Excel OBJ Record Stack Overflow
Exploit for windows platform in category local exploits ========================================= Microsoft Excel OBJ Record Stack Overflow ========================================= Title : Microsoft Excel OBJ Record Stack Overflow Version : Excell 2002 and XP SP3 Analysis : http://www.abysssec.c...
Microsoft Excel - OBJ Record Stack Overflow
Microsoft Excel - OBJ Record Stack Overflow ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/...