1072 matches found
UBUNTU-CVE-2014-9323
The xdrstatusvector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service NULL pointer dereference, segmentation fault, and crash via an opresponse action with a non-empty status...
CVE-2014-2279: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in SeedDMS formerly LetoDMS and MyDMS before 4.3.4 allow 1 remote authenticated users with access to the LogManagement functionality to read arbitrary files via a .. dot dot in the logname parameter to out/out.LogManagement.php or 2 remote attackers to...
CVE-2014-2278: Improper Input Validation
Unrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS formerly LetoDMS and MyDMS before 4.3.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the partitionIndex parameter and leveraging CVE-2014-2279.2 to access it...
Re-Script 0.99 Beta (listings.php op) SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...
openSUSE Security Update : XEN (openSUSE-SU-2012:1572-1)
This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...
Hacking Maytag: Coin-Operated Laudromat Machines
Most Maytag commercial washers and dryers out there use a common controller platform. It dates back to the 80s and is still produced. So almost all Maytag with digital control panel is exploitable in this way. The identifying features are green vacuum florescent display with a four-digit numerica...
PT-2014-2467
Name of the Vulnerable Software and Affected Versions Ubuntu Metal as a Service MaaS versions 1.2 through 1.4 Description A cross-site scripting XSS issue exists in the API, allowing remote attackers to inject arbitrary web script or HTML via the op parameter to the "nodes/" API endpoint...
CVE-2013-1070: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the API in Ubuntu Metal as a Service MaaS 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/...
PT-2014-4284
Name of the Vulnerable Software and Affected Versions Xen versions 4.1.5 through 4.1.6.1 Xen versions 4.2.2 through 4.2.3 Xen version 4.3.x Description The issue concerns the do physdev op function, which does not properly restrict access to the PHYSDEVOP prepare msix and PHYSDEVOP release msix...
PHP: sapi_header_op() %0D sequence handling security bypass
The sapiheaderop function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences aka carriage return characters, which allows remote attackers to bypass an HTTP response-splitting protection mechanism via a crafted URL, related to improper interaction betwe...
Code injection
Coursemill Learning Management System LMS 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter...
CVE-2013-3601: Undefined Security Weakness
Coursemill Learning Management System LMS 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter...
PT-2013-4507
Name of the Vulnerable Software and Affected Versions Coursemill Learning Management System LMS version 6.6 Description The issue allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter. This is due to the system not...
FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation
/ FreeBSD 9.0,1 mmap/ptrace exploit by Hunger Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... : Greetings to nohup, 2501, boldi, eax, johnnyb, kocka, op, pipacs, prof, sd, sghctoma, snq, spender, s2crew and others at hekkcamp: I hope we'll meet...
PT-2013-4453
Name of the Vulnerable Software and Affected Versions This HTML Is Simple THIS versions prior to 1.2.4 Description The issue allows remote execution of arbitrary SQL commands via vectors related to op=page&id= in the URL. Recommendations For versions prior to 1.2.4, update to version 1.2.4 or lat...
CVE-2013-3523: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in This HTML Is Simple THIS before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the URL...
Hackers Compromise The War Z Forum, Game Databases
Hackers compromised the forum and game database of the massively multiplayer online game, The War Z, forcing the game’s producer OP Productions to temporarily take the game and its forum offline. In a security alert issued yesterday, OP Productions informed The War Z players of the breach and...
PT-2013-3639
Name of the Vulnerable Software and Affected Versions bitcoind and Bitcoin-Qt versions 0.8.0 and earlier Description The issue allows remote attackers to cause a denial of service by mining a block to create a nonstandard Bitcoin transaction containing multiple OP CHECKSIG script opcodes, leading...
PT-2013-2134
Name of the Vulnerable Software and Affected Versions Xen version 4.2.x Description The issue allows guest OS users to cause a denial of service by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs, resulting in long-duration page mappings and host OS crash...
