Synology DiskStation Manager arbitrary file modification

Overview Synology DiskStation Manager versions 4.3-3776-3 and below contain a vulnerability that allows a remote unauthenticated user to append arbitrary data to an arbitrary file under root privileges. Description CWE-284: Improper Access Control - CVE-2013-6955Synology DiskStation Manager...

PT-2013-6222 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 4.3-3810 Update 3 Description: Multiple directory traversal vulnerabilities in the FileBrowser components allow remote attackers to read, write, and delete arbitrary files via a .. dot dot in...

Up.Time Monitoring Station post2file.php Arbitrary File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Up.Time Monitoring Station post2file.php Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload...

Up.Time Monitoring Station post2file.php Arbitrary File Upload

This Metasploit module exploits an arbitrary file upload vulnerability found within the Up.Time monitoring server 7.2 and below. A malicious entity can upload a PHP file into the webroot without authentication, leading to arbitrary code execution. This module requires Metasploit:...

cmstop through the kill injection vulnerability-vulnerability warning-the black bar safety net

Play for a few months this vulnerability. See the nine zones there ztz large cattle released out exp. 漏洞 文件 /apps/vote/controller/vote.php app.xxx.com/?app=vote&controller=vote&action=total&contentid=1 To obtain an administrator id ? app=vote&controller=vote&action=total&contentid=1 and 1=2 union...

Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability found within the Up.Time monitoring server 7.2 and below. A malicious entity can upload a PHP file into the webroot without authentication, leading to arbitrary code execution. Although the vendor fixed Up.Time to prevent this...

Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload

This module exploits a vulnerability found in Uptime version 7.4.0 and 7.5.0. The vulnerability began as a classic arbitrary file upload vulnerability in post2file.php, which can be exploited by exploits/multi/http/uptimefileupload1.rb, but it was mitigated by the vendor. Although the mitigation ...

DEBIAN-CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

UBUNTU-CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

PT-2013-5053 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12 Description: The issue is related to multiple buffer overflows in the Linux kernel, specifically in the drivers/staging/wlags49 h2/wl priv.c file. This can be exploited by local users with the CAP NET ADMIN...

GV32-CMS enterprise built Station system v5. 1. 9 getshelll-vulnerability warning-the black bar safety net

GV32-CMS enterprise built Station system v5. 1. 9 The official says so: GV32-CMS enterprise built Station system, is a based on PHP+MYSQL as the core development of a free + open source Professional Enterprise built Station system. Software with high efficiency, templates free to switch, backgrou...

phpscup enterprise built Station system v1. 8. 2-stored xss vulnerability-vulnerability warning-the black bar safety net

Long time useless computer, recently busy Ah, just from the factory-do come back..... Just before this point of time on the Internet, ^^ looking for a source see directly the analogy recommended and download!!! phpscup enterprise built Station system v1. 8. 2 Analysis ing...... The online search...

McKesson Active-X 11.0.10.38 Enumeration

McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member OpenTextFile from DXVLauncherLib.McKLauncher and returns ...

McKesson ActiveX File/Environmental Variable Enumeration

Exploit for windows platform in category remote exploits McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member...

McKesson - ActiveX FileEnvironmental Variable Enumeration

McKesson - ActiveX FileEnvironmental Variable Enumeration McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member...

McKesson - ActiveX File/Environmental Variable Enumeration

McKesson Rad Station ActiveX File/Variable Enumeration McKesson Rad Station File Enumeration This proof of concept will check if a file exists on the victim's machine or display the contents of an environmental variable. It uses the member OpenTextFile from DXVLauncherLib.McKLauncher and returns ...