7662 matches found
Modbus Unit ID and Station ID Enumerator
Modbus is a cleartext protocol used in common SCADA systems, developed originally as a serial-line RS232 async protocol, and later transformed to IP, which is called ModbusTCP. default tcp port is 502. This module sends a command 0x04, read input register to the modbus endpoint. If this command i...
CVE-2012-4772: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the planid parameter...
PT-2012-5583
Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 2.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the plan id parameter in the "register/" endpoint. Recommendations For versions prior to 2.2.3, update to...
kernel: unfiltered netdev rio_ioctl access by users
The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call...
Arb Blog 0.1 CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Arb Blog 0.1 CSRF Vulnerability Author: Mr.731MY Vendor or Software Link: http://www.dev-arb.com/uploads/Files/dev-arb.com1341094517.ZIP Version: 0.1 Category:: WebApp Google dork: intext:All Right Resrved For Dev-Arb.com And...
kernel: unfiltered netdev rio_ioctl access by users
The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call...
Debian DSA-2544-1 : xen - denial of service
Multiple denial of service vulnerabilities have been discovered in Xen, an hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-3494 : It was discovered that setdebugreg allows writes to reserved bits of the DR7 debug control register on amd6...
Clipster Video Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Clipster Video Persistent XSS Vulnerability Author: DaOne Price: $24 Software Link: http://www.clipsterscript.com/ Google Dork: "Powered by ClipsterScript.com" How to exploit: 1-go to : http://site.com/login.php?action=Register...
PT-2012-4673
Name of the Vulnerable Software and Affected Versions GNOME at-spi2-atk version 2.5.2 Description The issue concerns the register application function in atk-adaptor/bridge.c, which does not properly seed the random number generator. This results in the generation of predictable temporary file...
CVE-2011-5130
dev/less.php in Family Connections CMS FCMS 2.5.0 - 2.7.1, when registerglobals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv1 parameter...
PT-2012-2108
Name of the Vulnerable Software and Affected Versions Family Connections CMS FCMS versions 2.5.0 through 2.7.1 Description The issue allows remote attackers to execute arbitrary commands. This is possible when the register globals setting is enabled, and shell metacharacters are used in the argv1...
PT-2012-3664
Name of the Vulnerable Software and Affected Versions Newscoop versions 3.5.x through 3.5.4 Newscoop versions 4.0.0 through 4.0.RC3 Description The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This can be achieved by providing a URL in the GLOBALSg...
kernel: unfiltered netdev rio_ioctl access by users
The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call...
CVE-2012-4267
Cross-site scripting XSS vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2012-4267: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...
PT-2012-5295 · Sockso · Sockso
Name of the Vulnerable Software and Affected Versions: Sockso versions 1.5 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter in the "user/register" endpoint. Recommendations: For Sockso versions 1.5 and...
am4ss 1.2 <= three xss-vulnerability warning-the black bar safety net
Title : am4ss 1.2 = Multiple Vulnerabilities Author: s3n4t00r Affected versions : all version XSS storage type 1 1 - Register 2 - Login here http://localhost/am4ss/orderdev.php?step=2 3 - Create a Ticket and add your code html or js 4 - Show Tickets http://www.xxx.com/exp/am4ss/tickets.php XSSXSS...
Am4ss 1.2 Cross Site Scripting
Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members...
am4ss 1.2 <= Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members 0day.today 2018-02-18...
