144 matches found
Cross site request forgery (csrf)
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
Preparing for PCI DSS 4.0
PCI DSS 4.0 is currently in its request for comments RFC process, where the industry can provide comments and feedback to help shape the next iteration. This process is initially open to the participating organizations - members that help steer and inform the PCI SSC based on their experiences. T...
Exploit for Out-of-bounds Write in Libgd
exploits Some exploits I have written to showcase and to share...
SAP Internet Graphics Server HTTP and RFC listener denial of service vulnerability
SAP Internet Graphics Server IGS is a graphics server from SAP, Germany. The product is able to generate graphs or charts in different areas.HTTP is one of the hypertext transfer protocols; RFC listener is one of the RFC listener. A security vulnerability exists in HTTP and RFC listener in SAP IG...
Threat Outbreak Alert RuleID30637: Email Messages Distributing Malicious Software on September 18, 2017
Medium Alert ID: 55318 First Published: 2017 September 18 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30637 may contain the following files: Name ...
Threat Outbreak Alert RuleID29243: Email Messages Distributing Malicious Software on May 23, 2017
Medium Alert ID: 53929 First Published: 2017 May 23 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29243 may contain the following files: Name | Size...
Exploit for Classic Buffer Overflow in Microsoft
PoC exploit for CVE-2017-7269, a remote code execution vulnerabi...
PayloadsAllTheThings
Payloads All The Things A list of useful payloads and bypasse...
Threat Outbreak Alert RuleID25329: Email Messages Distributing Malicious Software on October 6, 2016
Medium Alert ID: 49211 First Published: 2016 October 6 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25329 may contain the following files: Name |...
Threat Outbreak Alert RuleID21982: Email Messages Distributing Malicious Software on June 23, 2016
Medium Alert ID: 44362 First Published: 2016 March 30 17:08 GMT Last Updated: 2016 June 24 13:46 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21982 and...
ctrls.in XSS vulnerability
Vulnerable URL: http://www.ctrls.in/request-for-a-proposal.php?url='"--...
Exploit for OS Command Injection in Gnu Bash
Shellshock-Vulnerability-Scan ============================= And...
Becky! Internet Mail Read Receipt请求缓冲区溢出漏洞
BUGTRAQ ID: 33756 Becky! Internet Mail是一个常用的Email客户端软件。 Becky! Internet Mail客户端没有正确地处理read receipt请求。如果用户查看了特制的邮件并允许发送read receipt请求的话，就可以触发缓冲区溢出，导致执行任意代码。 RimArts Becky! Internet Mail 2.48.02 厂商补丁： RimArts ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.rimarts.co.jp/index.html 在General...
CVE-2006-6559
SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute arbitrary SQL commands via the PID parameter...
CVE-2006-6559
The CVE-2006-6559 entry documents an SQL injection vulnerability in Lotfian Request For Travel 1.0, specifically in ProductDetails.asp where the PID parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: ProductDetails.asp in Lotfian Request For Travel 1.0. Roo...
Request For Travel 1.0 (product) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Request For Travel 1.0 product Remote SQL Injection Vulnerability =================================================================== Title : Request For Travel 1.0 produc...
Request For Travel 1.0 (product) Remote SQL Injection Vulnerability
No description provided by source. Title : Request For Travel 1.0 product | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $8,000 SQL http://target/path//ProductDetails.asp=SQL Example: - All News Title Changed to = "kro"...
