17432 matches found
CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands...
CVE-2014-5008
Snoopy allows remote attackers to execute arbitrary commands...
CVE-2014-5009
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008...
DEBIAN-CVE-2014-9823
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9819...
[SECURITY] [DSA 3824-1] firebird2.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3824-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 29, 2017 https://www.debian.org/security/faq -...
Sync Breeze Enterprise 9.5.16 Buffer Overflow
!/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.5.16 - Remote buffer overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Vendor Homepage: http://syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv9.5.16.exe Version: 9.5.16 Tested on: Windows ...
CVE-2014-6440
VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...
Deluge: Remote execution of arbitrary code
Background Deluge is a BitTorrent client. Description A CSRF vulnerability was discovered in the web UI of Deluge. Impact A remote attacker could entice a user currently logged in into Deluge web UI to visit a malicious web page which uses forged requests to make Deluge download and install a...
GLSA-201703-06 : Deluge: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201703-06 Deluge: Remote execution of arbitrary code A CSRF vulnerability was discovered in the web UI of Deluge. Impact : A remote attacker could entice a user currently logged in into Deluge web UI to visit a malicious web page...
CVE-2016-10273
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary code or crash the web service via the 1...
CVE-2014-8731
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot...
CADA 3S CoDeSys Gateway Server - Directory Traversal Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework http://metasploit.com require 'msf/core' class MetasploitModule 'SCADA 3S CoDeSys Gateway Server Directory...
iball Baton 150M Wireless router remote command execution vulnerability
No description provided by source...
CVE-2017-7230
A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...
CVE-2017-7230
A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...
Code injection
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862...
Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-03852)
Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. A remote code execution vulnerability exists in Hyper-V in Microsoft Windows. An attacker can exploit this vulnerability to execute arbitrary code on the host...
SLiMS 7 Cendana Cross-Site Scripting Vulnerability
SLiMS 7 Cendana is an open source, free library management system. A cross-site scripting vulnerability exists in versions of SLiMS 7 Cendana prior to 2017-03-16 that stems from the program failing to adequately filter user-submitted data. A remote attacker can exploit the vulnerability to execut...
CVE-2016-9696
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference : 1999960...
GLSA-201703-02 : Adobe Flash Player: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201703-02 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...