PT-2014-1706

Name of the Vulnerable Software and Affected Versions sendmail versions prior to 8.14.9 Description The issue exists in the sm close on exec function due to incorrect argument order and missing expected FD CLOEXEC flags. This allows local users to access high-numbered file descriptors using a...

CVE-2011-4515

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

Design/Logic Flaw

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

CVE-2011-4515

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

PT-2013-1459

Name of the Vulnerable Software and Affected Versions Siemens WinCC TIA Portal version 11 Description The issue allows local users to obtain sensitive information by leveraging physical access or Sm@rt Server access, due to the use of a reversible algorithm for storing HMI web-application passwor...

CVE-2012-4743: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...

PT-2012-5569

Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue concerns SQL injection vulnerabilities in the ssearch.php file of the Siche search module. Remote attackers can execute arbitrary SQL commands by manipulating certain...

Cisco IOS 15.x组播源发现协议远程拒绝服务漏洞

BUGTRAQ ID: 52759 CVE ID: CVE-2012-0382 MSDP是用于连接多个PIM-SM域的协议，允许一个组的组播源让不同域内的所有RP知悉。 从外部MSDP配置的对等路由器接收到包含压缩的IGMP数据的MSDP报文时，可造成受影响设备重载。如果该路由器明确的加入了组播组，才可利用此漏洞。MSDP报文目标地址是单一传播，可发往受影响设备上的任何IP地址，包括回送地址。通行报文不会触发此漏洞。 0 Cisco IOS 15.x 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20120328-msdp）以及相应补丁:...

cPanel 11.x (Fantastico) Local File Include / SM-b0x

Exploit for php platform in category web applications cPanel 11.x Fantastico Local File Include / SM-b0x ////\ //\ //\ //\ //\ //\ //\ //\ //\ :::/\ ::\:.\ \::\ \ \ \ :\ \ ::: \ \::: \ \::\ \:::/ /: / \:::/ ::/\ .\ \ //\:\ \ :: \ \:: /:/ /: / /::/ /\/\:: ::\ \::::/ :...

DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities

Document Title: =============== DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2011-07-29 Vulnerability Laboratory ID VL-ID: ==================================== 70...

DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities

Document Title: =============== DELL KBOX SM Appliance v5.1.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2011-07-28 Vulnerability Laboratory ID VL-ID: ==================================== 70...

Dawaween V 1.03 SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Dawaween V 1.03 SQL Injection Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Textpattern CMS 4.2.0 Remote File Inclusion

Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Textpattern index.php -------------------------------------------------------------- + Author : Sn!pEr.S!Te Hacker + Email : [email protected] + Inj3ct0r Team Hacker + 28-8-201...

Multiple Web Browser Clickjacking Vulnerability (FF3.6.7/SM 2.0.6)

. Mozilla Firefox 3.6.7 & SeaMonkey 2.0.6 Waiting for patch htmlhead meta http-equiv="content-type" content="text/html; charset=UTF-8" titleFF3.6.7/SM 2.0.6 ClickJacking Vulnerability/title /headbody div id="mydiv" onmouseover="document.location='http://www.mozilla.org';" style="border: 0px none ...

phpYellow Shell Upload Vulnerability

No description provided by source. ======================================================================================== | Title : phpYellow Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 ...