71 matches found
Western Digital EdgeRover 安全漏洞
Western Digital EdgeRover is a personal content application from Western Digital USA. A security vulnerability existed prior to version 0.25 of Western Digital EdgeRover, which stems from the way Node.js is used, where a low-privileged user could load malicious content into a directory with highe...
Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux
Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...
jdtmotors.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-553105 Description| Value ---|--- Affected Website:| jdtmotors.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
roverinstruments.com XSS vulnerability
Vulnerable URL: http://www.roverinstruments.com/faq.php?padrefaq=18=How+do+I+retrieve+the+credentials+%28Username+and+Password%29+to+access+the+%E2%80%9CUpdate+SW%E2%80%9D+area+=18KNOXSS Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:02 GMT...
landroverinsurance.com XSS vulnerability
Vulnerable URL: https://www.landroverinsurance.com/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...
Land Rover InControl Remote - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Land Rover InControl Remote published at the 'play' market has multiple vulnerabilities...
Neslo Desktop Rover 3.0 Malformed Packet Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13281/info Neslo Desktop Rover is prone to a remote denial of service. Reports indicate that the software will crash when a malformed packet is processed on TCP port 61427. A remote attacker may exploit this condition cra...
20-Year Old Vulnerability Patched in Compression Algorithm
A 20-year old vulnerability in the Lempel-Ziv-Oberhumer LZO compression algorithm – used in some Android phones, the Linux kernel, and even Mars Rovers – was finally patched this week. Code stemming from the algorithm’s library function has existed in the wild for two decades, but was recycled ov...
20-Year Old Vulnerability in LZO Compression Algorithm Went to Planet Mars
A 20 year old critical subtle integer overflow vulnerability has been discovered in Lempel-Ziv-Oberhumer LZO, an extremely efficient data compression algorithm that focuses on decompression speed, which is almost five times faster than zlib and bzip compression algorithms. Lempel-Ziv-Oberhumer LZ...
Log Rover pword Parameter SQL Injection
The remote host is running Log Rover, an ASP application for analyzing web server log files. The web interface included with the version of Log Rover installed on the remote host fails to sanitize user-supplied input to the 'pword' parameter of the 'login.asp' script before using it to construct...
News Rover 12.1 Rev 1 - Stack Overflow (2)
!/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected] ==============================================================================================...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit
No description provided by source. / News Rover 12.1 Rev 1 Remote Stack Overflow exploit Coded and discovered by Marsu  ...
CVE-2007-1041
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
Stack overflow
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
CVE-2007-1041
The CVE-2007-1041 entry affects S&H Computer Systems News Rover 12.1 Rev 1, with multiple stack-based buffer overflows triggered by a crafted .nzb file containing a long group or subject string. This allows remote attackers to execute arbitrary code. The vulnerability details describe a straightf...
CVE-2007-1041
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...
News Rover 12.1 Rev 1 - Stack Overflow (1)
/\ News Rover 12.1 Rev 1 Remote Stack Overflow exploit Coded and discovered by Marsu Note: thx aux Bananas et a la KryptonIT. Bon courage aux inuITs :P / include "stdlib.h" include "stdio.h" include "string.h" / win32exec - EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit
Exploit for unknown platform in category local exploits =================================================== News Rover 12.1 Rev 1 Remote Stack Overflow Exploit =================================================== /\ News Rover 12.1 Rev 1 Remote Stack Overflow exploit Coded and discovered by Marsu...
News Rover 12.1 Rev 1 - Stack Overflow (1)
News Rover 12.1 Rev 1 - Stack Overflow 1 /\ News Rover 12.1 Rev 1 Remote Stack Overflow exploit Coded and discovered by Marsu Note: thx aux Bananas et a la KryptonIT. Bon courage aux inuITs :P / include "stdlib.h" include "stdio.h" include "string.h" / win32exec - EXITFUNC=seh CMD=calc.exe...
News File Grabber 4.1.0.1 - Subject Line Stack Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/22617/info News File Grabber is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue...