1071 matches found
CVE-2014-8072
The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin...
OpenMRS 2.1 Access Bypass / XSS / CSRF
Exploit Title: OpenMRS 2.1 Standalone version Multiple Security Vulnerabilities Date: 20/10/2014 Remote: Yes Exploit Author: Mahendra Vendor Homepage: http://openmrs.org Software Link: http://sourceforge.net/projects/openmrs/files/releases/OpenMRS2.1/openmrs-2.1-standalone.zip/download Version: 2...
SAP Netweaver DoS
DoS against "Standalone Enqueue Server" service...
[SECURITY] Fedora 20 Update: thunderbird-24.7.0-1.fc20
Mozilla Thunderbird is a standalone mail and newsgroup client...
SysExporter - Grab data from list-view, tree-view, combo box, WebBrowser control, and text-box
SysExporter utility allows you to grab the data stored in standard list-views, tree-views, list boxes, combo boxes, text-boxes, and WebBrowser/HTML controls from almost any application running on your system, and export it to text, HTML or XML file. Here's some examples for data that you can expo...
Glossword 1.8.8 & 1.8.12 - Arbitrary File Upload Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
XCloner Standalone 3.5 - CSRF Vulnerability
No description provided by source...
AllMyGuests <= 0.4.1 (cfg_serverpath) Remote File Include Vulnerability
No description provided by source. ============================================================================ AllMyGuests = ?AMGconfigcfgserverpath Remote File Inclusion Exploit ============================================================================ Scirpt Infected signin.php Critical leve...
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal Exploit
No description provided by source. !/usr/bin/env python Acrobat Reader - Collab getIcon universal exploiter evilpdf.py, tested on Operating Systems: Windows XP SP3 English/French Windows 2003 SP2 English with Application versions: Adobe Reader 9.0.0/8.1.2 English/French Test methods: Standalone...
openSUSE Security Update : flash-player (openSUSE-SU-2011:0239-1)
The Adobe Standalone Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4239. The text...
foreman-installer: insecure defaults
The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by connecting to Qpid...
Сross-Site Request Forgery (CSRF) in XCloner Standalone
Advisory ID: HTB23207 Product: XCloner Standalone Vendor: XCloner Vulnerable Versions: 3.5 and probably prior Tested Version: 3.5 Advisory Publication: March 14, 2014 without technical details Vendor Notification: March 14, 2014 Public Disclosure: April 9, 2014 Vulnerability Type: Cross-Site...
CVE-2014-2579
Multiple cross-site request forgery CSRF vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrator password via the config task to index2.php or 2 when the enabledbbackup and sqlmem...
CVE-2014-2996
XCloner Standalone 3.5 and earlier, when enabledbbackup and sqlmem are enabled, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackupcomp parameter in a generate action to index2.php. NOTE: it is not clear whether this issue crosses...
Code injection
XCloner Standalone 3.5 and earlier, when enabledbbackup and sqlmem are enabled, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackupcomp parameter in a generate action to index2.php. NOTE: it is not clear whether this issue crosses...
CVE-2014-2996
XCloner Standalone 3.5 and earlier, when enabledbbackup and sqlmem are enabled, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackupcomp parameter in a generate action to index2.php. NOTE: it is not clear whether this issue crosses...
CVE-2014-2579
Multiple cross-site request forgery CSRF vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrator password via the config task to index2.php or 2 when the enabledbbackup and sqlmem...
CVE-2014-2996
XCloner Standalone 3.5 and earlier are affected by CVE-2014-2996: when enable_db_backup and sql_mem are enabled, remote authenticated administrators can execute arbitrary commands via shell metacharacters in the dbbackup_comp parameter in a generate action to index2.php. The notes indicate uncert...
XCloner Standalone跨站请求伪造漏洞
Bugtraq ID:65751 CVE ID:CVE-2014-2579 XCloner Standalone是一个备份和恢复应用。 XCloner Standalone存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 XCloner Standalone 3.5 目前没有详细解决方案： http://www.xcloner.com/...
XCloner Standalone 3.5 Cross Site Request Forgery Vulnerability
XCloner Standalone version 3.5 suffers from a cross site request forgery vulnerability. Product: XCloner Standalone Vendor: XCloner Vulnerable Versions: 3.5 and probably prior Tested Version: 3.5 Advisory Publication: March 14, 2014 without technical details Vendor Notification: March 14, 2014...