4951 matches found
Ubuntu: Security Advisory (USN-2000-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SterJo Task Manager v.2.6] Advanced utility for process managing
SterJo Task Manager is a FREE an advanced utility for process managing which allows you to get details on everything that’s running on your computer. The program is divided in several sections covering the main parts of each system. “Processes” gives you more details about all processes and also...
Multiple Products DVR Configuration Disclosure (CVE-2013-1391)
A configuration disclosure vulnerability has been reported in the DVR web server of multiple vendors which allows authentication bypass. A remote attacker could get the unencrypted configuration file by requesting the "/DVR.cfg" without entering credentials. Successful exploitation of this...
destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net
在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...
PJ blog plug-in vulnerability of the actuator can be bulk obtained webshell-vulnerability warning-the black bar safety net
pjblog in 0 7 in a civil plug-in vulnerabilities. PJ blog editor of the vulnerability, without filtering sensitive characters. Currently this plugin author has not maintenance updates. Don't use this plugin, the blog will not be affected Can batch get most of the PJ blog WEBSHELL。 ! QQ screenshot...
Amazon Linux AMI : openssl (ALAS-2012-38)
It was discovered that the Datagram Transport Layer Security DTLS protocol implementation in OpenSSL leaked timing information when performing certain operations. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a DTLS server as a padding...
Loftek Nexus 543 IP Cameras CSRF Vulnerability
Exploit for hardware platform in category web applications CSRF: Loftek Nexus 543 CSRF PoC Memory Dump: !/bin/sh This script exploits CVE-2013-3311 to retrieve kernel memory from a Loftek Nexus 543 IP camera The file which is downloaded can be analyzed strings to recover passwords and other goodi...
Code injection
The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code; read, modify, or create files; or obtain file metadata via function opcodes...
Design/Logic Flaw
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload...
Open And Compact FTP Server 1.2 Bypass / Directory Traversal
!/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass http://www.exploit-db.com/exploits/13932/ Software Link:...
(Gabriels FTP Server) Open Compact FTP Server 1.2 - Authentication Bypass Directory Traversal SAM Retrieval
Gabriels FTP Server Open Compact FTP Server 1.2 - Authentication Bypass Directory Traversal SAM Retrieval !/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge...
Open&Compact FTP Server 1.2 - Auth Bypass & Directory Traversal SAM Retrieval Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass...
(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Authentication Bypass / Directory Traversal SAM Retrieval
!/usr/bin/python Exploit Title: Open&Compact Ftp Server = 1.2 Auth bypass & directory traversal sam retrieval Date: Aug 7, 2013 By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass http://www.exploit-db.com/exploits/13932/ Software Link:...
AZL-41159 CVE-2013-1633 affecting package python-pip 24.2-6
easyinstall in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product...
UBUNTU-CVE-2013-1629
pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation...
PYSEC-2013-8
pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation...
[SECURITY] Fedora 17 Update: libkcddb-4.10.5-1.fc17
CDDB retrieval library...
ShopEx4.85最新版本SQL注入【1】
简要描述： ShopEx4.85最新版本SQL注入，无需登录，过GPC，可直接查询管理员密码并回显 详细说明： 啥都不说了，直接上利用代码，将下面的html另存为一个html文件，修改localhost部分为站点的真实地址： None 漏洞证明：...
whois-domain NSE Script
Attempts to retrieve information about the domain name of the target See also: whois-ip.nse Example Usage nmap --script whois-domain.nse This script starts by querying the whois.iana.org which is the root of the whois servers. Using some patterns the script can determine if the response represent...