15794 matches found
ManageEngine OpManager FileCollector Servlet File Upload
File upload vulnerability in ManageEngine OpManager FileCollector servlet FILENAME parameter Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
ManageEngine OpManager MigrateCentralData Servlet File Upload
File upload vulnerability in ManageEngine OpManager MigrateCentralData servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
[oCERT 2014-008] libFLAC multiple issues
Description: FLAC is an open source lossless audio codec supported by several software and music players. The libFLAC project, an open source library implementing reference encoders and decoders for native FLAC and Ogg FLAC audio content, suffers from multiple implementation issues. In particular...
DSA-3082-1 flac - security update
Bulletin has no description...
PBBoard 2.1.4 username SQL Injection
SQL Injection vulnerabilty in PBBoard index.php username parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
ManageEngine OpManager MigrateLEEData Servlet File Upload
File upload vulnerability in ManageEngine OpManager MigrateLEEData servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
[Responsible disclosure] Hacking Facebook.com/thanks Posting on behalf of your friends!
Note: This is being published with the permission of Facebook under the responsible disclosure policy. The vulnerability is now fixed. Facebook recently introduced "Say Thanks", an experience that lets Facebook user to create personalized video cards for their facebook friends. To create a Thanks...
WordPress Plugin DB Backup - Arbitrary File Download
|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress db-backup plugin File Download Vulnerability | | Google Dork: inurl:wp-content/plugins/db-backup/ | | Date : Date: 2014-11-26 | | Exploit Autho...
Android SMS Resend Vulnerability
Android versions prior to 5.0 allow an unprivileged application the ability to resend all the SMS's stored in the users phone. INTRODUCTION ================================== In Android 5.0, an unprivileged app can resend all the SMS stored in the user's phone to their corresponding recipients or...
flac -- Multiple vulnerabilities
Erik de Castro Lopo reports: Google Security Team member, Michele Spagnuolo, recently found two potential problems in the FLAC code base. They are: CVE-2014-9028: Heap buffer write overflow. CVE-2014-8962: Heap buffer read overflow...
Detekt - scans your Windows computer for traces of known surveillance spyware
Detekt is a free tool that scans your Windows computer for traces of FinFisher and Hacking Team RCS, commercial surveillance spyware that has been identified to be also used to target and monitor human rights defenders and journalists around the world. In recent years we have witnessed a huge...
Costin Raiu on the Regin APT Malware
Denis Fisher talks with Costin Raiu of the Kaspersky Lab GReAT Team about the discovery of the Regin APT malware, the threat’s targets and tactics, its ability to compromise GSM base stations and its other capabilities. Download: digitalunderground173.mp3 Music by Chris Gonsalves...
Advantech EKI-6340 - Command Injection
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Advantech EKI-6340 Command Injection 1. Advisory Information Title: Advantech EKI-6340 Command Injection Advisory ID: CORE-2014-0009 Advisory URL: http://www.coresecurity.com/advisories/advantech-eki-6340-command-injection Date...
Linksys Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Nisuta Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Netgear Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
D-LINK Router Information Disclosure
Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Linksys Information Disclosure
Directory traversal vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
WordPress Plugin CM Download Manager 2.0.0 - Code Injection
WordPress Plugin CM Download Manager 2.0.0 - Code Injection Vulnerability title: Code Injection in Wordpress CM Download Manager plugin 2.0.0 CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Link download:...