596 matches found
Tenmiles Helpdesk Pilot Knowledge Base Plugin SQL Injection Vulnerability
Tenmiles Helpdesk Pilot is a web-based helpdesk and customer support software from Tenmiles India that provides remote assistance, problem management, customer management, etc. Knowledge Base is one of the knowledge base plug-ins. A SQL injection vulnerability exists in the Tenmiles Helpdesk Pilo...
Wireshark ATN-CPDLC Parser Denial of Service Vulnerability
Wireshark is a network packet analyzer. The dissectatncpdlcheur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c within the ATN-CPDLC parser in Wireshark version 1.12.x prior to 1.12.4, fails to properly adhere to TRY/ENDTRY code requirements. A remote attacker can exploit this vulnerabilit...
Two Pilots Exif Pilot Buffer Overflow Vulnerability
Two Pilots Exif Pilot is a free EXIF an image file format editor from Two Pilots, which is mainly used for analyzing digital camera settings, depicting information about the conditions of taking EXIF data, and supports processing multiple photos, importing/exporting metadata, and more. A buffer...
CVE-2015-1362
Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string in the maker element in an XML file...
CVE-2015-1362
Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string in the maker element in an XML file...
CVE-2015-1362
CVE-2015-1362 affects Two Pilots Exif Pilot 4.7.2, where a buffer overflow in the "Customize 35mm" tab allows remote attackers to execute arbitrary code via a long string in the maker element of an XML file. Affected component: Exif Pilot application; root cause: overflow in parsing the maker ele...
Exif Pilot 4.7.2 - Buffer Overflow (SEH)
Exif Pilot 4.7.2 - Buffer Overflow SEH !/usr/bin/env ruby Exploit Title: Exif Pilot SEH Based Buffer Overflow Version: version 4.7.2 Download: http://www.colorpilot.com/load/exif.exe Tested on: Windows XP sp2 Exploit Author: Osanda M. Jayathissa E-Mail: osandacatunseen.is =begin Click Tools Optio...
Exif Pilot 4.7.2 Buffer Overflow Exploit
Exif Pilot version 4.7.2 SEH-based buffer overflow exploit. !/usr/bin/env ruby Exploit Title: Exif Pilot SEH Based Buffer Overflow Version: version 4.7.2 Download: http://www.colorpilot.com/load/exif.exe Tested on: Windows XP sp2 Exploit Author: Osanda M. Jayathissa E-Mail: osandacatunseen.is...
Exif Pilot 4.7.2 - Buffer Overflow (SEH)
!/usr/bin/env ruby Exploit Title: Exif Pilot SEH Based Buffer Overflow Version: version 4.7.2 Download: http://www.colorpilot.com/load/exif.exe Tested on: Windows XP sp2 Exploit Author: Osanda M. Jayathissa E-Mail: osandacatunseen.is =begin Click Tools Options Customize 35mm tab Import and choose...
Exif Pilot 4.7.2 Buffer Overflow
!/usr/bin/env ruby Exploit Title: Exif Pilot SEH Based Buffer Overflow Version: version 4.7.2 Download: http://www.colorpilot.com/load/exif.exe Tested on: Windows XP sp2 Exploit Author: Osanda M. Jayathissa E-Mail: osandacatunseen.is =begin Click Tools Options Customize 35mm tab Import and choose...
Hardcoded credentials
The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...
CVE-2014-0326
The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...
Iridium Pilot and OpenPort contain multiple vulnerabilities
Overview Broadband satellite terminals using Iridium Pilot and OpenPort have been found to contain undocumented hardcoded login credentials CWE-798. Additionally, these broadband satellite terminals utilize an insecure proprietary communications protocol that allows unauthenticated users to perfo...
ASPilot Pilot Cart 7.3 newsroom.asp SQL Injection Vulnerability
No description provided by source. Title: ASPilot Pilot Cart 7.3 SQL Injection Date: 12.11.2010 Author: Daikin Software Link: http://www.pilotcart.com Version: 7.3 maybe also lower Vendor's Description of Software and demo: http://www.pilotcart.com Dork: Powered by Pilot Cart V.7.3 Application...
Wordpress Automatic Plugin 2.0.3 - SQL Injection
No description provided by source. Title: ====== Wordpress Automatic Plugin v2.0.3 SQL Injection Date: ===== 2012-06-15 Website: =========== http://codecanyon.net/item/wordpress-automatic-plugin/1904470 Introduction: ============= Wordpress automatic plugin posts quality targeted articles, Amazon...
Pilot Group eTraining news_read.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection Vulnerability
No description provided by source. Helpdesk Pilot Knowledge Base SQL injection vulnerability - articleid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 29, 2009 Software Information + Vendor : http://www.helpdeskpilot.com/ + Download : - + version :...
Pilot Group PG Roommate SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Pilot Group eTraining lessons_login.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
Pilot Group eTraining courses_login.php cat_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...