CVE-2015-0513

CVE-2015-0513 describes Cross-Site Scripting in EMC M&R (Watch4Net) Centralized Management Console and related UI components. Affected products are EMC M&R (Watch4Net) up to version 6.5u1 and EMC ViPR SRM up to version 3.6.1. The root cause is reflected/stored XSS in administrative UI elements (C...

Release Notes for Veeam Backup & Replication 8.0 Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 1 Cause Please confirm you are running version 8.0.0.807, 8.0.0.817 or 8.0.0.831 prior to installing...

ProjectSend r-561 - Arbitrary File Upload Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: ProjectSend r-651 File Upload Date: December 01, 2014 Exploit Author: Fady Mohamed Osman Exploit-db id:2986 Vendor Homepage: http://www.projectsend.org/ Software Link: http://www.projectsend.org/download/67/...

PWG R&om <= 1.11 - CSRF & XSS

The pwgrandom WordPress plugin was affected by a CSRF & XSS security vulnerability...

Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation

Challenge Inventory job or any tape jobs may fail with an error "Tape requires return to original slot , but it is already filled. Move tape manually, and retry operation" You may find following entries in the Job..TapeVmBackup.log / Job..TapeFilesBackup or Job.Tapelibraryinventory.TapeInventory:...

PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications ​ Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities in PHP Stock Management System 1.02 Date: 25 Aug 2014 Exploit Author: ​Ragha Deepthi K R Vendor Homepage: ​http://www.posnic.com/​ Software Link:​...

Android Side-Channel Hack Leads to Data Loss at USENIX

A weakness in Android, one that’s likely also found in other leading operating systems, allows an attacker to infer what’s happening on a victim’s user interface and launch an appropriate secondary attack resulting in data loss. Researchers from the University of Michigan and the University of...

Default credentials

ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to modify device configuration and cause a denial of service adverse human health effects...

LAN Management System (LMS) <= 1.9.6 - Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

X-Cart Pro 4.0.13 - SQL Injection Proof of Concept

No description provided by source. X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from www.website.com/README Can't find reference to this old vuln elsewhere...

Portable AVS DVD Authoring 1.3.3.51 - Local Crash PoC

No description provided by source. C:\perl\bin Exploit Title: Portable AVS DVD Authoring Date: 2010/4pr/05 Author: R3d-D3v!L Version: v1.3.3.51 Tested on: windows XP sp3 Coded by x coder : my $file= crash.mp3; my $boom=...

Sunway Force Control SCADA 6.1 SP3 httpsrv.exe Exploit

No description provided by source. Sunway Force Control SCADA httpsvr.exe Exploit Exploitable with simple SEH Overwrite technique Tested on XP SP0 English Probably will work on XP SP3 if you find none-safeseh dll for p/p/r pointer Canberk BOLAT | @cnbrkbolat cbolat.blogspot.com for fun ; notez:...

Half-Life CSTRIKE Server 1.6 - Denial of Service Exploit (no-steam)

No description provided by source. ---- Counter Strike 1.6 Denial Of Service POC ... ITDefence.ru Antichat.ru Counter Strike 1.6 Denial Of Service POC Eugene Minaev [email protected] Bug was found by Maxim Suhanov THE FUF works only with no-steam servers / \ \ \ / .\ / /// // / \ / \ // / /...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose SEH Overwrite PoC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com...

VideoCharge Studio 2.12.3.685 - Buffer Overflow (SEH)

No description provided by source. !/usr/bin/python Exploit Title: VideoCharge Studio SEH Buffer Overflow Date found: 27.10.2013 Exploit Author: metacom URL: http://www.videocharge.com/download.php Software Link: www.videocharge.com/download/VideoChargeStudioInstall.exe Version: 2.12.3.685 Tested...

THoRCMS <= 1.3.1 (phpbb_root_path) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- THoRCMS = 1.3.1 phpbbrootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team...

clanlite 2.x (SQL Injection/xss) Multiple Vulnerabilities

No description provided by source. CANAKKALE GECiLMEZ yildirimordulari.org z0rlu.ownspace.org ClanLite V2 SQL inj. & XSS dork: Créé par Narfight, ClanLite V2.2006.05.20 © 2000-2005 dork: Themed By Ray © 2003, 2004 iOptional readme script / Fichier : Copyright : C 2004 ClanLite V2 Email :...

Xerver 4.31, 4.32 HTTP Response Splitting

No description provided by source. Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE...

Smadav Anti Virus 9.1 Crash PoC

No description provided by source. Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1...

Netopia R-series routers 4.6.2 Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1177/info All R-series platforms with firmware between 4.3.8 and 4.6.2 inclusive allow users who already have access to the router to modify SNMP tables which they should not be able to access. The router has a command-li...