2609 matches found
OX App Suite 7.6.0 SQL Injection Vulnerability
OX App Suite versions 7.6.0 and below suffer from a remote SQL injection vulnerability. Product: OX App Suite Vendor: Open-Xchange GmbH Internal reference: 34765 Bug ID Vulnerability type: SQL Injection CWE-89 Vulnerable version: 7.6.0 and earlier Vulnerable component: backend Report confidence:...
Croogo 2.0.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities
------------------------ XSS 1 -------- POST parameters: - dataContacttitle ------------------------ input type="hidden"...
put-map.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-50297 Description| Value ---|--- Affected Website:| put-map.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
Freefloat FTP Server PUT Command Buffer Overflow
No description provided by source...
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
No description provided by source. $Id: shoutcastformat.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Microsoft IIS WebDAV Write Access Code Execution
No description provided by source. $Id: iiswebdavuploadasp.rb 10397 2010-09-20 15:59:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Clam AntiVirus <= 0.88.4 (rebuildpe) Remote Heap Overflow PoC
No description provided by source. Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl http://www.exploit-db.com/sploits/10172006-clampetiteheap.exe.bz2 milw0rm.com 2006-10-17...
CVE-2012-5106
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a PUT command...
Stack overflow
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a PUT command...
CVE-2012-5106
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a PUT command...
[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Accept Answer URL should be idempotent and accept PUT or POST requests only
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46610. panel Answers currently users a single URL to both accept and un-accept answers: noformat $baseurl/acceptanswer/$answerid...
Accept Answer URL should be idempotent and accept PUT or POST requests only
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46610. panel Answers currently users a single URL to both accept and un-accept answers: noformat $baseurl/acceptanswer/$answerid...
Accept Answer URL should be idempotent and accept PUT or POST requests only
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-46610. panel Answers currently users a single URL to both accept and un-accept answers: noformat $baseurl/acceptanswer/$answeri...
VulnCheck KEV: CVE-2013-6282
The getuser and putuser API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation...
PT-2013-5986 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 3.5.5 Description: The issue arises from improper input validation in the Linux kernel, specifically in the 1 get user and 2 put user API functions on the v6k and v7 ARM platforms. This allows attackers to read ...
[SECURITY] Fedora 18 Update: nodejs-request-2.21.0-1.fc18
Request is designed to be the simplest way possible to make HTTP calls. It supports HTTPS and follows redirects by default. You can stream any response to a file stream. You can also stream a file to a PUT or POST request. It also supports a few simple server and proxy functi ons...
Oracle Linux 5 / 6 : cups (ELSA-2013-0580)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0580 advisory. - Fix for CVE-2012-5519 patch: handle blacklisted lines that have no value part gracefully. - Added documentation for new CVE-2012-5519 option. - Applied...