2455 matches found
Sagem Fast 3304-V1 - Denial Of Service Vulnerability
Exploit for hardware platform in category dos / poc Title : Sagem email protected 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem email protected 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact :...
Sagem Fast 3304-V1 - Denial of Service
Title : Sagem F@st 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem F@st 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact : [email protected] Facebook Page : https://www.facebook.com/Z3ro0ne...
BitDefender GravityZone 5.1.5.386 - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Bitdefender GravityZone vulnerable version: =5.1.11.432 impact: critical homepage: http://www.bitdefender.com found: 2014-05-22...
Information disclosure in the REST API
Jira reports the 404 not-found earlier than the 401 not-authorized. This discloses the non-existence of a specific issue numbers to unauthorized users. While this isn't a huge leak, this could come in useful with social engineering. Proof of concept: Both of the calls below are unauthenticated, a...
Puppet < 2.7.26 / 3.6.2 and Enterprise 2.8.x < 2.8.7 Multiple Vulnerabilities
According to its self-reported version number, the Puppet install on the remote host is affected by multiple vulnerabilities : - A privilege escalation vulnerability related to input validation and paths exists in the bundled Ruby environment. An attacker could trick a privileged user into...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
Novell Sentinel Log Manager <= 1.2.0.2 - Retention Policy Vulnerability
No description provided by source. Novell Sentinel Log Manager ver. =1.2.0.2 allows unauthenticated users configuring retention policies. Vendor informed: 2012/09/06 Patch Released: 2012/09/21 PoC: !/bin/bash TARGET=$1 PORT=8443 if $ -ne 1 ; then echo Usage: basename $0 target exit 1 fi echo POST...
airVisionNVR 1.1.13 readfile() Disclosure and SQL Injection
No description provided by source. Exploit Title: airVisionNVR readfile disclosure and sql injection Google Dork: Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link: http://www.ubnt.com/downloads/airvision/airVision-v1.1.3-installer.exe Version: 1.1.1...
Netscape Enterprise Server 3.0/4.0 'Index' Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2285/info Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request. INDEX / HTTP/1.0...
WebTester 5.x Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
PABox 1.6 Password Reset Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8067/info paBox is prone to an issue that may allow unauthenticated remote users to reset administrative passwords. This could permit unauthorized access to the administrative Control Panel...
IBM Scalable POWERparallel (SP) 2.0 sdrd Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/371/info There is a vulnerability in the System Data Repository SDR subsystem. The SDR subsystem is used in IBM SP multi-machine parallel processing environments typically associated with Super Computing. The SDR is...
MediaWiki Thumb.php - Remote Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
openSUSE Security Update : openldap2 (openSUSE-SU-2011:0359-1)
Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
AlienVault 4.3.1 - Unauthenticated SQL Injection Vulnerability
Exploit for php platform in category web applications AlienVault 4.3.1 Unauthenticated SQL Injection Vulnerability Type: SQL Injection Reporter: Sasha Zivojinovic Company: Gotham Digital Science Affected Software: AlienVault 4.3.1 Severity: Critical...
Dell KACE K1000 File Upload
This module exploits a file upload vulnerability in Kace K1000 versions 5.0 to 5.3, 5.4 prior to 5.4.76849 and 5.5 prior to 5.5.90547 which allows unauthenticated users to execute arbitrary commands under the context of the 'www' user. This module also abuses the 'KSudoClient::RunCommandWait'...
Multiple Routers HNAP Insecure Implementation Privilege Escalation
Multiple routers are vulnerable to insecure implementations of the Home Network Administration Protocol HNAP. This vulnerability could allow unauthenticated users to view and configure administrative settings on the router...
MediaWiki Thumb.php Remote Command Execution Exploit
Exploit for multiple platform in category remote exploits require 'msf/core' class Metasploit3 'MediaWiki Thumb.php Remote Command Execution', 'Description' = %q MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5 and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows...
MediaWiki - 'Thumb.php' Remote Command Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'MediaWiki Thumb.php Remote Command Execution', 'Description' = %q MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5 and 1.19.x...