Lucene search
+L

3418 matches found

0day.today
0day.today
added 2008/11/25 12:0 a.m.11 views

Pie Web M{a,e}sher Mod Rss 0.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Pie Web Ma,esher Mod Rss 0.1 Remote File Inclusion Vulnerability ================================================================== Pie Web RSS module 0.1 lib Remote File...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/11/25 12:0 a.m.29 views

Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion

Pie Web RSS module 0.1 lib Remote File injulide : download: http://pie.ekkaia.org/file/modrss-0.1.tar.gz ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...

6.8CVSS5.8AI score0.01812EPSS
SaveExploits2
Prion
Prion
added 2008/11/21 2:30 a.m.30 views

Null pointer dereference

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

4.3CVSS6.3AI score0.0921EPSS
SaveExploits3References21Affected Software5
Prion
Prion
added 2008/11/21 2:30 a.m.30 views

Cross site request forgery (csrf)

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

10CVSS6.7AI score0.03669EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2008/11/21 2:30 a.m.8 views

CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

7.5AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2008/11/21 2:30 a.m.34 views

CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

10CVSS7.1AI score0.03669EPSS
SaveExploits1References4
NVD
NVD
added 2008/11/21 2:30 a.m.19 views

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

7.5CVSS7.2AI score0.0921EPSS
SaveExploits2References21
OSV
OSV
added 2008/11/21 2:30 a.m.4 views

DEBIAN-CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

10CVSS6.8AI score0.03669EPSS
SaveExploits1References1
OSV
OSV
added 2008/11/21 2:30 a.m.11 views

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

7.5CVSS7.3AI score
SaveExploits0References23
Cvelist
Cvelist
added 2008/11/21 2:0 a.m.31 views

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

7.3AI score0.0921EPSS
SaveExploits2References21
Debian CVE
Debian CVE
added 2008/11/21 2:0 a.m.27 views

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

7.5CVSS6AI score0.0921EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2008/11/21 12:0 a.m.3 views

PT-2008-1076 · Apple +1 · Cups +1

Name of the Vulnerable Software and Affected Versions: CUPS versions 1.3.9 and earlier cups-devel version 1.2.4 cups-libs version 1.2.4 cups-lpd version 1.2.4 cups version 1.2.4 Description: The issue allows local users, and possibly remote attackers, to cause a denial of service by adding a larg...

10CVSS7.2AI score0.0921EPSS
SaveExploits2References38
seebug.org
seebug.org
added 2008/11/19 12:0 a.m.15 views

CUPS 1.3.7 CSRF (add rss subscription) Remote Crash Exploit

No description provided by source. !-- cat cupsdospoc.html -- script // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i=101;++i document.write"img width=0 height=0 " +...

7.1AI score
SaveExploits0
0day.today
0day.today
added 2008/11/18 12:0 a.m.38 views

CUPS 1.3.7 CSRF (add rss subscription) Remote Crash Exploit

Exploit for linux platform in category dos / poc =========================================================== CUPS 1.3.7 CSRF add rss subscription Remote Crash Exploit =========================================================== // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CU...

7AI score
SaveExploits0
Fedora
Fedora
added 2008/11/14 12:52 p.m.48 views

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-4.fc9

This is an evolution plugin which enables evolution to read rss feeds...

10CVSS3.1AI score0.10187EPSS
SaveExploits3
Fedora
Fedora
added 2008/11/14 12:50 p.m.28 views

[SECURITY] Fedora 8 Update: liferea-1.4.15-5.fc8

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

10CVSS2AI score0.10187EPSS
SaveExploits3
Fedora
Fedora
added 2008/11/14 12:50 p.m.42 views

[SECURITY] Fedora 8 Update: evolution-rss-0.0.8-13.fc8

This is an evolution plugin which enables evolution to read rss feeds...

10CVSS3.1AI score0.10187EPSS
SaveExploits3
Fedora
Fedora
added 2008/11/14 12:50 p.m.31 views

[SECURITY] Fedora 8 Update: blam-1.8.3-19.fc8

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

10CVSS2.3AI score0.10187EPSS
SaveExploits3
NVD
NVD
added 2008/11/13 11:30 a.m.23 views

CVE-2008-5053

PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader comrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

10CVSS7.6AI score0.63276EPSS
SaveExploits3References6
canvas
canvas
added 2008/11/13 11:30 a.m.59 views

Immunity Canvas: JOOMLARSS_RFI

Name| joomlarssrfi ---|--- CVE| CVE-2008-5053 Exploit Pack| CANVAS Description| Joomla Simple RSS Reader Remote File Include Notes| CVSS: 10.0 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5053 CVE Name: CVE-2008-5053...

10CVSS6.8AI score0.63276EPSS
SaveExploits3
Rows per page
Query Builder