Viber 4.2.0 Denial Of Service

!/usr/bin/perl -w -- coding: utf-8 - + Title: Viber Non-Printable Characters Handling Denial of Service Vulnerability + Product: Viber + Vendor: http://www.viber.com/en/ + SoftWare Link : https://itunes.apple.com/app/viber-free-phone-calls/id382617920?mt=8 + Vulnerable Versions: Viber 4.2.0 on IO...

KMPlayer 3.9.x - .srt Crash (PoC)

KMPlayer 3.9.x - .srt Crash PoC !/usr/bin/perl -w Title : KMPlayer 3.9.x - Crash Proof Of Concept Company : http://www.kmplayer.com Tested : Windows 7 / Windows 8.1 Author : Peyman Motevalli Manesh Linkedin : https://ir.linkedin.com/in/peymanmotevalli E-Mail : meatPDPnetworkdotir Website :...

Viber Remote Crash Proof Of Concept

!/usr/bin/perl -w -- coding: utf-8 - + Author: Mohammad Reza Espargham + Title: Viber Remote Crash on non-printable characters + Product: Viber + Vendor: http://www.viber.com/en/ + SoftWare Link : https://itunes.apple.com/app/viber-free-phone-calls/id382617920?mt=8 + Vulnerable Versions: Viber...

SixApart MovableType Storable Perl Code Execution Vulnerability

MovableType, MT for short, is a weblog blog publishing system introduced by Six Apart, Inc. located in California, USA. A code execution vulnerability exists in SixApart MovableType. An attacker can exploit the vulnerability to execute arbitrary code...

Futomi CGI Cafe MP Form Mail CGI eCommerce Arbitrary Code Execution Vulnerability

Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows is a Windows-based CGI for sending emails from Web forms by Futomi Japan. A security vulnerability exists in Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows platform prior to version 2.0.12. A remote attacker can exploit the vulnerabilit...

CVE-2015-0898

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

Design/Logic Flaw

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

CVE-2015-0898

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

CVE-2015-0898

The CVE concerns Futomi CGI Cafe MP Form Mail CGI eCommerce edition running on Windows. The vulnerability allows a remote attacker to execute arbitrary Perl code due to an injection flaw in the CGI eCommerce implementation, affecting version 2.0.11 and earlier. The impact is remote code execution...

CVE-2015-0898: Improper Control of Generation of Code

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

PT-2015-4953

Name of the Vulnerable Software and Affected Versions futomi CGI Cafe MP Form Mail CGI eCommerce versions prior to 2.0.12 Description The issue allows remote attackers to execute arbitrary Perl code. Recommendations For versions prior to 2.0.12, update to version 2.0.12 or later to resolve the...

MP Form Mail CGI eCommerce edition vulnerable to code injection

Overview MP Form Mail CGI eCommerce edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce edition contains a code injection vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...

Incredible PBX remote command execution exploit

!/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.com Vendor: PBX in a Flash Vendor url:...

FreeBSD : twiki -- remote Perl code execution (21ce1840-6107-11e4-9e84-0022156e8794)

TWiki developers report : The debugenableplugins request parameter allows arbitrary Perl code execution. Using an HTTP GET request towards a TWiki server, add a specially crafted debugenableplugins request parameter to TWiki's view script typically port 80/TCP. Prior authentication may or may not...

CVE-2014-7180

Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for 1 eccert.pl and 2 ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files...

Code injection

Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for 1 eccert.pl and 2 ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files...

CVE-2014-7180

Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for 1 eccert.pl and 2 ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files...

CVE-2014-7180: Undefined Security Weakness

Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for 1 eccert.pl and 2 ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files...

PT-2014-7818

Name of the Vulnerable Software and Affected Versions Electric Cloud ElectricCommander versions prior to 4.2.6 Electric Cloud ElectricCommander versions 5.x prior to 5.0.3 Description The issue allows local users to execute arbitrary Perl code by modifying certain files due to world-writable...

CVE-2012-5697

The btinstall installation script in Bulb Security Smartphone Pentest Framework SPF before 0.1.3 uses weak permissions 777 for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary Perl code via direct access to these files...