155 matches found
Mail Manage EX 3.1.8 MMEX Script Settings Parameter Remote PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10457/info Mail Manage EX is reportedly prone to a remote file include vulnerability. This vulnerability results from insufficient sanitization of user-supplied data and may allow remote attackers to include arbitrary PHP...
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18859/info The AdPlug library is affected by multiple remote buffer-overflow vulnerabilities. These issues are due to the library's failure to properly bounds-check user-supplied input before copying it into insufficientl...
Toenda CMS 1.6.2 Osaka Stable Local File Inclusion
============TOENDA CMS 1.6.2 OSAKA "STABLE" MULTIPLE VULNERABILITIES============ Vulnerable Software: toendaCMS1.6.2OsakaStable Developed by: http://www.toendacms.org/index.php/en/open/download.html toenda.com http://www.toendacms.org/index.php/en/open/download.html Downloaded from:...
Opera 11.51 - Use-After-Free Crash (PoC)
Opera 11.51 - Use-After-Free Crash PoC Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link:...
PT-2011-4398 · Openfabrics · Openfabrics Enterprise Distribution
Name of the Vulnerable Software and Affected Versions: OpenFabrics Enterprise Distribution OFED versions prior to 1.5.3 Description: The issue is related to the handling of non-array variables in the ib sdp module, which can lead to a denial of service due to stack memory corruption and system...
Musicbox v3.7 and previous version Multiple Vulnerabilites
Exploit for php platform in category web applications ============================================================ MusicBox / / alertdocument.cookie&action=search&start=0 0day.today 2018-02-16...
Vulnerabilities in Cetera CMS
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в Cetera eCommerce. Insufficient Anti-automation: http://site/ http://site/account/ На данных страницах отсутствует защита от автоматизированных запросов капча. XSS:...
SunAge 1.8.1 - Multiple Denial of Service Vulnerabilities
SunAge 1.8.1 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/29889/info SunAge is prone to multiple denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to crash affected game servers, denying service to legitimate...
Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit
Exploit for unknown platform in category remote exploits ========================================================== Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit ========================================================== / Dreatica-FXP crew ----------------------------------------...
Softerra PHP Developer Library 1.5.3 - 'Grid3.lib.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20442/info Softerra PHP Developer Library is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
Remote Format String Vulnerabilities in eXtremail
Package: eXtremail Auth: http://www.extremail.com/ Versions: 1.5.9 current release Vulnerability: Format String What’s eXtremail: eXtremail is a Unix mail server that supports SMTP/POP3/IMAP protocols. It includes support for virtual domains, spoofing attack ,SSL connection and Antivirus checking...
TYPSoft FTP Server 1.1 - Remote CPU Consumption (Denial of Service)
source: https://www.securityfocus.com/bid/9702/info It has been reported that TYPESoft FTP Server is prone to a remote denial of service vulnerability that may allow an attacker to cause the server to crash. This vulnerability has been reported to affect version 1.10 of the software, however,...
Web Wiz Site News 3.6 - Information Disclosure
Web Wiz Site News 3.6 - Information Disclosure source: https://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the...
InstaBoard 1.3 - index.cfm SQL Injection
InstaBoard 1.3 - index.cfm SQL Injection source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the...
