1859 matches found
CVE-2014-4243
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED...
Content Security Policy Mitigates XSS, Breaks Sites
Content Security Policy CSP is an effective, browser-based deterrent against cross-site scripting attacks. Despite this, the vast majority of websites do not deploy the standard, and the majority of those that do, deploy it improperly. The goal of CSP is to mitigate content injection attacks...
Server: Host Header Poisoning
Due to trusting user supplied input and interpret it as Host header an attacker is able to craft a password reset mail with a link pointing to his own site. If a user clicks on the link or a software e.g. antivirus is accessing the link the attacker is able to reset the user password. For more...
Server: Users can mount the local filesystem
Due to not properly sanitzing the mount configuration authenticated users are able to mount the local filesystem into their ownCloud. A successful exploit requires the filesexternal app to be enabled. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4....
Webbler CMS 3.1.3 Mail A Friend Open Email Relay Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25045/info The 'webbler' is prone to an open-email-relay vulnerability. An attacker may leverage the issue to use webservers that are hosting the vulnerable software to send arbitrary unsolicited bulk email. Attackers may...
WEBgais 1.0 websendmail Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2077/info WEBgais is a package that provides a web interface to the gais Global Area Intelligent Search search engine tool. This package contains a vulnerable script, websendmail, which can be used to execute arbitrary...
IBM Tivoli Directory Server 3.2.2/4.1 LDACGI Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitization of user-supplied data. This...
IkonBoard 3.1 Lang Cookie Arbitrary Command Execution Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7361/info It has been reported that IkonBoard is prone to an arbitrary command execution vulnerability. The vulnerability is due to insufficient sanitization performed on user supplied cookie data. An attacker may exploit...
Novell Netware 4.1/4.11 SP5B NDS Default Rights Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and...
Arab Network Tech. (ANT) CMS - SQL Injection
No description provided by source. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::: Exploit Title : Arab Network Tech. ANT CMS SQL Injection Author : Tr0y-x Script Site : www.antpage.comhttp://www.antpage.com/ Version : All Versions Tested on : Windows & Linux...
Key Focus Web Server 3.1 Index.WKF Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24623/info Key Focus Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...
ActFax 5.01 RAW Server Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
WebFS 1.x Long Pathname Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...
TinyServer 1.1 - Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...
uGround <= 1.0b SQL Injection Vulnerability
No description provided by source. uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: uGround v1.0b SQL Injection news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl...
Easy Banner Pro (index.php page) Local File Inclusion
No description provided by source. ----------------------------------------------------------- Easy Banner Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/ Demo -...
Apache Tomcat Manager Application Deployer Authenticated Code Execution
No description provided by source. $Id: tomcatmgrdeploy.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Red Faction <= 1.20 Server Reply Remote Buffer Overflow Exploit
No description provided by source. / by Luigi Auriemma UNIX & WIN VERSION / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include winerr.h define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb.h...
teamspeak <= 3.0.0-beta25 Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: TeamSpeak 3 http://www.teamspeak.com Versions: = 3.0.0-beta23 2.x not affected Platforms: Windows, Mac OS X and Linux Bugs: A execution of various admin commands B various failed assertions C various NULL pointer dereferences...
PHP Web Explorer 0.99b edit.php file Parameter Traversal Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...