CVE-2014-4717

CVE-2014-4717 affects the WordPress plugin “Simple Share Buttons Adder” (versions prior to 4.5). The issue comprises multiple CSRF vulnerabilities that allow remote attackers to hijack administrator sessions and trigger stored XSS via the ssba_share_text parameter in a save action to wp-admin/opt...

CVE-2014-4717

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...

Microsoft Print Spooler Service Impersonation Vulnerability

No description provided by source. $Id: ms10061spoolss.rb 11766 2011-02-17 19:22:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Cheyenne Inoculan for Windows NT 4.0 Share Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/106/info It is possible to run arbitrary code on any Intel machine running Cheyenne Inoculan version 4.0 for Windows NT prior to SP2. Inoculan runs as a service, called Cheyenne InocuLAN Anti-Virus Server. When it starts,...

Microsoft Windows XP/2000/NT 4 Shell Long Share Name Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10213/info Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. This issue is exposed when a client attempts to connect to an SMB share with an overly long...

Easy LAN Folder Share 3.2.0.100 - Buffer Overflow Vulnerability

No description provided by source. Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerabilitySEH Date: 14-06-2013 Exploit Author: ariarat Vendor Homepage: http://www.mostgear.com Software Link: http://download.cnet.com/Easy-LAN-Folder-Share/3000-20854-10909166.html...

quickshare file share 1.2.1 - Directory Traversal vulnerability

No description provided by source. !/usr/bin/python Exploit Title: QuickShare File Share 1.2.1 Directory Traversal Vulnerability Date: 02/03/2011 Author: modpr0be Software Link: http://www.quicksharehq.com/files/qfssetup.exe Vulnerable version: 1.2.1 Tested on: Windows XP SP3 VMware Player 3.1.3...

P2P Share Spy 2.2 - Local Password Disclosure Exploit

No description provided by source. / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web :...

Microsoft Windows 9x / Me Share Level Password Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It...

Apache HTTP Server 2.2.6 Windows Share PHP File Extension Mapping Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26939/info Apache is prone to an information-disclosure vulnerability. This issue occurs because Apache fails to properly associate file extensions with the correct engines when handling specially crafted requests for fil...

AlstraSoft Video Share Enterprise 4.x MyajaxPHP.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fil...

Personal File Share 1.0 DoS

No description provided by source. !/usr/bin/python Exploit Title: Personal File Share 1.0 DoS Date: 2nd April 2013 Exploit Author: npn Vendor Homepage: http://www.srplab.com/ Software Link: http://download.cnet.com/Personal-File-Share/3000-185064-75893424.html Version: 1.0 Tested on: Windows XP...

Root Exploit Western Digital's WD TV Live SMP/Hub

No description provided by source. Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of it...

HP Data Protector Client EXEC_SETUP Remote Code Execution PoC (ZDI-11-056)

No description provided by source. Exploit Title: HP Data Protector Cliet EXECSETUP Remote Code Execution Vulnerability PoC ZDI-11-056 Date: 2011-05-29 Author: fdisk @fdiskyou e-mail: fdiskyou at deniable.org Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0922 Notes: ZDI-11-056...

Microsoft Windows 9x / Me Share Level Password Bypass Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It...

File Share 1.0 - SQL Injection Vulnerability

No description provided by source. - Alg3r!eN H4xoRz - - FILE SHARE V 1.0 SQL Injection Vulnerability - Author : TOP SAT 13 - MAIL : [email protected]:[email protected] 'Or' [email protected]:[email protected] / Software Information / Vendor : http://www.script-ati.com / script : FILE SHARE V 1.0...

Print n Share v5.5 iOS - Multiple Web Vulnerabilities

No description provided by source. Document Title: =============== Print n Share v5.5 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1154 Release Date: ============= 2013-12-06 Vulnerability Laboratory ID VL-ID:...

Microsoft Windows XP Self-Executing Folder Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10363/info A vulnerability has been reported in Microsoft Windows XP that may cause malicious code to run in the context of the currently logged-in user. The flaw exists in Windows Explorer and may allow executable conten...

Tutorial Share <= 3.5.0 Insecure Cookie Handling Vulnerability

No description provided by source. -------------------------------------------------------------- Tutorial Share 3.4 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Auothr :Evil-Cod3r Home: Creativexploit.com Contact : [email protected] &...

Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 Null Session Admin Name Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/494/info By establishing a Null session with an NT host, an intruder can gain the name of even a renamed Administrator account. This is because even Null sessions are added to the Everyone group for the duration of the...