51 matches found
Magic Home Pro 1.5.1 - Authentication Bypass
Exploit Title: Magic Home Pro 1.5.1 - Authentication Bypass Google Dork: NA Date: 22 October 2020 Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2020-27199/ Vendor Homepage: http://www.zengge.com/appkzd Software Link:...
[SECURITY] [DSA 4404-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4404-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2019 https://www.debian.org/security/faq -...
CVE-2017-18047
Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply...
Serviio Media Server checkStreamUrl Command Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule /Restlet-Framework/ include Msf::Exploit::Remote::HttpClient include Msf::Exploit::CmdStager def initializeinfo = superupdateinfoinfo, 'Name' =...
CVE-2012-5361
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...
CVE-2016-0102
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0103, CVE-2016-0106,...
vBulletin 5.x.x Remote Code Execution 0day Exploit
sql injection vulnerability, you can upload shell and remote execute Today I am hacked vbulletin.com , You can buy 0day today ; http://www.vbulletin.com/forum/content.php/813-Recovering-a-hacked-vBulletin-Site This is private exploit. You can buy it at http://0day.today...
CVE-2014-5428
Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server ADS, Extended Application and Data Server aka ADX, LonWorks Control Server 85 LCS8520, Network Automation Engine NAE 55xx-x, Network Integration...
CVE-2012-1805
Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to execute arbitrary code via long strings in unspecified parameters...
Sockso Music Host Server 1.5 Directory Traversal
This module exploits a directory traversal bug in Sockso on port 4444. This is done by using "../" in the path to retrieve a file on a vulnerable machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
CVE-2011-2594
Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...
foomatic-gui python-foomatic 0.7.9.4 - pysmb.py Arbitrary Shell Command Execution
foomatic-gui python-foomatic 0.7.9.4 - pysmb.py Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/48982/info foomatic-gui is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An...
Mandriva Update for rsync MDVSA-2011:066 (rsync)
Check for the Version of rsync OpenVAS Vulnerability Test Mandriva Update for rsync MDVSA-2011:066 rsync Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Small Pirate <= 2.3 (avatar) Remote PHP File Execute PoC
Exploit for php platform in category web applications Exploit Title: Small Pirate Content of pwned.txt /home146/sub011/sc78626-TZRV/xxxxxxxxx.org/poc.php VICTIM: 207.182.149.243 info: Mozilla/5.0 X11; U; Linux i686; es-AR; rv:1.9.2.13 Gecko/20101206 Ubuntu/10.04 lucid Firefox/3.6.13 language:...
Redmine remote code execution vulnerability-vulnerability warning-the black bar safety net
Redmine is based on the ROR framework for the development of a cross-platform project management system, project management system of the rising star. Redmine remote code execution vulnerability exists that could lead an attacker to remotely execute arbitrary code. +info: joernchen...
CVE-2010-1010
SQL injection vulnerability in the MK Wastebasket mkwastebasket extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Stack overflow
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle .ass file, probably involving the Dialogue field...
CVE-2008-4396
Stack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via an executable with malformed version data...
[NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit
!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ exploit url: http://retrogod.altervista.org/9sgc6downloadexec.html "C6 Messenger is an instant messaging program produced by...
CVE-2008-2013
SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action...