2732 matches found
DEBIAN-CVE-2015-8388
PCRE before 8.38 mishandles the /?=di?=?1|?=./ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript...
Sam Spade 1.14 - (Crawl website) Buffer OverFlow Exploit
Exploit for windows platform in category local exploits Exploit Title : Sam Spade 1.14 - Buffer OverFlow Date : 10/30/2015 Exploit Author : MandawCoder Contact : email protected Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Version :...
Sam Spade 1.14 - Crawl Website Buffer Overflow
Exploit Title : Sam Spade 1.14 - Buffer OverFlow Date : 10/30/2015 Exploit Author : MandawCoder Contact : [email protected] Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Version : 1.14 Tested on : XP Professional SP3 En x86 Categor...
Sam Spade 1.14 - Scan From IP Address Field Overflow Crash (SEH) (PoC)
Sam Spade 1.14 - Scan From IP Address Field Overflow Crash SEH PoC !/usr/bin/env python -- coding: utf-8 -- Exploit Title : Sam Spade 1.14 Scan from IP address Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 20/10/2015 Vendor Homepage :...
IconLover 5.42 - Local Buffer Overflow
Exploit Title: IconLover v5.42 Buffer Overflow Exploit Date: 29/09/2015 Exploit Author: cor3sm4sh3r Author email: cor3sm4sh3ratgmail.com Contact: https://in.linkedin.com/in/cor3sm4sh3r Twitter: https://twitter.com/cor3sm4sh3r Category: Local Tested : win XP professional sp2 ''' Credits & Authors:...
IKEView.exe R60 - .elg Local (SEH)
IKEView.exe R60 - .elg Local SEH Exploit Title: IKEView.exe R60 localSEH Exploit Date: 17/09/2015 Exploit Author: cor3sm4sh3r Author email: cor3sm4sh3ratgmail.com Contact: https://in.linkedin.com/pub/shravan-kumar-ceh-oscp/103/414/450 Category: Local + Gr337z: hyp3rlinx for finding the bug +...
SphereFTP Server 2.0 - Crash (PoC)
SphereFTP Server 2.0 - Crash PoC !/usr/bin/python Exploit Title: SphereFTP Server v2.0 Remote Crash PoC Date: 2015-09-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.menasoft.com/blog/?p=32 Software Link:...
Caucho Resin Professional 3.1.5 - 'resin-admin/digest.php' Multiple Cross-Site Scripting Vulnerabili
CVE-2010-2032Caucho Resin Professional is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of...
Mock SMTP Server 1.0 - Remote Crash (PoC)
Mock SMTP Server 1.0 - Remote Crash PoC !/usr/bin/python Exploit Title: Mock SMTP Server 1.0 Remote Crash PoC Date: 23-08-2015 Exploit Author: Shankar Damodaran Author's Twitter : @sh4nx0r Vendor Homepage: http://mocksmtpserver.codeplex.com Software Link:...
用友PDM Professional全版本通用型配置不当导致getshell
简要描述： rt 详细说明： 涉及： 用友PDM Professional 7.5 用友PDM Professional 6.5SP1 用友PDM Professional 7.2 用友PDM Professional 7.0 用友PDM Professional 6.0 详细看案例。 jboss未授权访问导致getshell None 漏洞证明：...
Igreks MilkyStep Light and Professional SQL Injection Vulnerabilities
Igreks MilkyStep is a magazine push CGI via email system from Igreks Japan.MilkyStep Light and MilkyStep Professional are the lightweight and professional versions respectively. A SQL injection vulnerability exists in Igreks MilkyStep Light and Professional. A remote attacker can exploit this...
Igreks MilkyStep Light and Professional Cross-Site Request Forgery Vulnerabilities
Igreks MilkyStep is a magazine push CGI via email system from Igreks Japan.MilkyStep Light and MilkyStep Professional are the lightweight and professional versions respectively. A cross-site request forgery vulnerability exists in Igreks MilkyStep Light and Professional. A remote attacker could...
Igreks MilkyStep Light and Professional Access Restriction Bypass Vulnerability
Igreks MilkyStep is a magazine push CGI via email system from Igreks Japan.MilkyStep Light and MilkyStep Professional are the lightweight and professional versions respectively. A security vulnerability exists in Igreks MilkyStep Light and Professional. A remote attacker could exploit the...
CVE-2015-2958
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and modify settings via unspecified vectors, a different vulnerability than CVE-2015-2952 and CVE-2015-2953...
Design/Logic Flaw
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and modify settings via unspecified vectors, a different vulnerability than CVE-2015-2952 and CVE-2015-2953...
CVE-2015-2958
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and modify settings via unspecified vectors, a different vulnerability than CVE-2015-2952 and CVE-2015-2953...
Design/Logic Flaw
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-2954
The CVE concerns Igreks MilkyStep products vulnerable to Cross-Site Request Forgery (CSRF, CWE-352). Affected components are MilkyStep Light version 0.94 and earlier, MilkyStep Professional version 1.82 and earlier, and related OEM/builds. If a logged-in user views a malicious page, an attacker c...