2732 matches found
JVN#19732015: MilkyStep fails to restrict access permissions
MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions against the management function for user information CWE-284. Impact A non-administrative user may be able to change administrative user credentials. Solution...
JVN#12241436: MilkyStep vulnerable to cross-site request forgery
MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Software Update to...
Jildi FTP Client 1.5.6 (SEH) Buffer Overflow Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Author: Zahid Adeel Title: Jildi FTP Client 1.5.6 SEH BOF Version: 1.5.6 Build 1536 Software Link: http://usfiles.brothersoft.com/internet/ftp/jildiftp.zip Tested on: WinXP Professional SP3 Open jildi-poc.txt file and copy i...
MobaXterm - Terminal for Windows with X11 server, tabbed SSH client, network tools and much more...
MobaXterm is your ultimate toolbox for remote computing. In a single Windows application, it provides loads of functions that are tailored for programmers, webmasters, IT administrators and pretty much all users who need to handle their remote jobs in a more simple fashion. MobaXterm provides all...
ManageEngine ServiceDesk Plus 9.0 - User Enumeration
ManageEngine ServiceDesk Plus 9.0 - User Enumeration ================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plu...
Want to Hire a Hacker? Check Out Hacker's List Website
Want to hack someone’s Facebook account? or Gmail account? or break into somebody’s network? But don’t have hacking skills to do so. There’s no need to worry at all. A new service is out there for you guys where you can search for professional hackers and hire them to accomplish any hacking task...
MP3-CD-Converter-Professional-BoF-(SEH)
Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH Date: 12/20/2010 Author: C4SS!0 G0M3S Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe Version: 5.0.3 import os import sys import struct import time def usage: os.system"cls" os.system"color 4f" print"\n"...
Aviosoft-Digital-TV-Player-Professional-1.x
Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow Author: modpr0be Software Download: http://www.aviosoft.com/download.php?product=dtvplayerpro Date: 08/11/2011 Tested on: Windows XP SP3, Windows 7 SP1 import struct file = 'adtvbof.plf' totalsize = 5000 junk = 'A' 8...
CVE-2011-5291
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...
Design/Logic Flaw
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...
CVE-2011-5291
The CVE-2011-5291 entry concerns Ashampoo 3D CAD Professional (3.x) before 3.0.2, where the SaveData method of the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx allows a remote attacker to write arbitrary files by supplying a pathname as the first argument. The vulnerability is rooted in...
CVE-2011-5291
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...
CVE-2014-2026 Reflected Cross-Site Scripting (XSS) in "Intrexx Professional"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2026 =================== "Reflected Cross-Site Scripting XSS" CWE-79 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated cross-platform developmen...
CVE-2014-2025 Remote Code Execution (RCE) in "Intrexx Professional"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2025 =================== "Remote Code Execution RCE via Unrestricted File Upload" CWE-434 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated...
Cross site scripting
Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...
CVE-2014-2026
Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...
CVE-2014-2026
The CVE-2014-2026 entry concerns United Planet Intrexx Professional (5.2 prior to Online Update 0905; 6.x prior to Online Update 10). The vulnerability is a reflected Cross-Site Scripting (XSS) in the search functionality, allowing an attacker to inject arbitrary script/HTML via the request param...
CVE-2014-2026
Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...
IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow
IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com...
IPUX CL5452/CL5132 IP Camera - 'UltraSVCamX.ocx' ActiveX Stack Buffer Overflow
IPUX CL5452/CL5132 IP Camera UltraSVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Bullet Type ICL5132 firmware: ICL5132 2.0.0-2 20130730 r1112 Bullet Type...