780 matches found
boastMachine 2.8 Index.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26032/info boastMachine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local script...
RedHat <= 6.1,IRIX <= 6.5.18 lpd Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/927/info Multiple vulnerabilities have been discovered in lpd, shipped with various Linux and Unix distributions. It has been reported that lpd fails to properly authenticate hostnames. This could allow an unauthenticated...
Acal calendar 2.2.6 CSRF Vulnerability
No description provided by source. Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: Calendar Admin: Edit Header and Footer Tested on:...
dalbum 144 build 174 and earlier CSRF Vulnerabilities
No description provided by source. dalbum 144 build 174 and earlier CSRF Vulnerabilities =================================================================================== Exploit Title:dalbum 144174 and earlier CSRF Vulnerabilities Vendor: http://www.dalbum.org/ Download link...
Microweber CMS 0.93 - CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Microweber CMS v0.93 CSRF Vulnerability Author: sajith version: Microweber CMS v0.93 Vendor Homepage: http://microweber.com/ vulnerable app link:http://microweber.com/download Application is vulnerable to CSRF.below is the POC...
Microweber CMS 0.93 - Cross-Site Request Forgery
Exploit Title: Microweber CMS v0.93 CSRF Vulnerability Author: sajith version: Microweber CMS v0.93 Vendor Homepage: http://microweber.com/ vulnerable app link:http://microweber.com/download Application is vulnerable to CSRF.below is the POC where attacker can use this vulnerability to create new...
IBM WebSphere Portal Unauthorized User Directory Access
The version of WebSphere Portal on the remote host may be affected by an unauthorized user directory access vulnerability. An attacker could manipulate URLs and gain access to sensitive files. Note that Nessus was unable to determine if the workaround in IBM's advisory has been applied. Determini...
CVE-2013-4536
An user able to alter the savevm data either on the disk or over the wire during migration could use this flaw to to corrupt QEMU process memory on the destination host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...
Cisco TelePresence Video Communication Server SIP DoS
According to the self-reported version returned by the remote device, it is affected by a vulnerability that could allow an unauthorized user to cause a denial of service via a specially crafted SDP message. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified...
Design/Logic Flaw
The web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify the CLP interface for arbitrary users and possibly have other impact via a request to an unspecified form that is accessible from testurls.html. NOTE: the vendor disputes the significance of this issu...
Sensitive Army database of U.S. dams compromised by Chinese Hackers
U.S. intelligence agencies traced a recent cyber intrusion into U.S. Army database that holds sensitive information about vulnerabilities in U.S. dams. The U.S. Army Corps of Engineers National Inventory of Dams contains information about 79,000 dams throughout the country and tracks such...
[20130402] - Core - Information Disclosure
Inadequate permission checking allows unauthorised user to see permission settings in some circumstances...
[PT-2012-53] Privilege Gaining in DataLife Engine
----------------------------------------------------------- PT-2012-53 Positive Technologies Security Advisory Privilege Gaining in DataLife Engine ----------------------------------------------------------- --- Vulnerable software DataLife Engine Version: 9.7 and earlier Application link:...
Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers
Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012:...
SmartJobBoard CSRF add user
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 »...
Tencent microblogging XSS attack vulnerability-vulnerability warning-the black bar safety net
from: author:Kingthy's I believe we all know Sina Weibo in 6 on 2 8 may occurXSSattack event? That night, a large number of Sina Weibo users to automatically send tweets and automatically focus on one called“hellosamy“of the user. What exactlyXSSattacks why can have so much power for? Now many...
[DSECRG-11-041] SAP NetWeaver - Authentication bypass (Verb Tampering)
DSECRG-11-041 SAP NetWeaver - Authentication bypass Verb Tampering Authentication bypass vulnerability in SAP NetWeaver CTC service can be exploited for unauthorized user management and OS command execution. Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.SAP.co...
SAP NetWeaver - Authentication bypass (Verb Tampering)
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL: http://www.sap.com Bugs:Auth bypass, Verb tampering Exploits: YES Reported: 14.03.2011 Vendor response:15.03.2011 Date of Public Advisory:11.11.2011 CVSS: 10 by ERPSCAN 7.3 by SAP Author:Alexandr Polyakov Description...
Multiple D-Link routers authentication bypass vulnerability-vulnerability warning-the black bar safety net
International famous network equipment manufacturers D-LINKfriends communicationscompany multiple the router's Web Management Interface the presence of the authentication bypass vulnerability may cause unauthorized user to browse, modify the router's Management Configuration. In addition, there i...