7546 matches found
CVE-2013-2802
The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code; read, modify, or create files; or obtain file metadata via function opcodes...
Code injection
The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code; read, modify, or create files; or obtain file metadata via function opcodes...
CVE-2013-2802
The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code; read, modify, or create files; or obtain file metadata via function opcodes...
Fedora Update for owncloud FEDORA-2013-13143
Check for the Version of owncloud OpenVAS Vulnerability Test Fedora Update for owncloud FEDORA-2013-13143 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Java storeImageArray() Invalid Array Indexing Vulnerability
This module abuses an Invalid Array Indexing Vulnerability on the static function storeImageArray function in order to cause a memory corruption and escape the Java Sandbox. The vulnerability affects Java version 7u21 and earlier. The module, which doesn't bypass click2play, has been tested...
MiniUPnPd 1.0 - Remote Stack Buffer Overflow Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'MiniUPnPd 1.0 Stack Buffer Overflow...
Israeli Scientists develop advanced biological computer
Researchers at the Technion-Israel Institute of Technology in Haifa have created an advanced biological computer using only bio molecules such as DNA and enzymes. There's no traditional CPU or hard drive powering the bio-computer, no hardware or software, nor is there any tangible interface to th...
Kernel: USB io_ti driver NULL pointer dereference in routine chase_port
The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service NULL pointer dereference and system crash via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter...
Firefox toString console.time Privileged Javascript Injection
This exploit gains remote code execution on Firefox 15-22 by abusing two separate Javascript-related vulnerabilities to ultimately inject malicious Javascript code into a context running with chrome:// privileges. Module Options msf use exploit/multi/browser/firefox/tostringconsoleinjection msf...
[SECURITY] Fedora 18 Update: owncloud-4.5.9-1.fc18
ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...
Kernel: USB io_ti driver NULL pointer dereference in routine chase_port
The chaseport function in drivers/usb/serial/ioti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service NULL pointer dereference and system crash via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter...
WEEDCMS management system background of weak passwords+ - sensitive information disclosure-vulnerability warning-the black bar safety net
Brief description: Through access to vulnerability files can get the user name account and password. But the background presence of the Universal password. Detailed description: Visit: http://www.xxxx.com/install.lock You can get the administrator account and password information, the password is...
Cisco uBR10000 Series IPv4/IPv6 Dual Stack Vulnerability
Cisco uBR10000 Series Universal Broadband Routers contain a vulnerability that could allow an unauthenticated, adjacent attacker to trigger the reload of the routing engine on the affected device. An attacker could exploit this vulnerability by manipulating IPv4 and IPv6 address assignments on a...
Adobe ColdFusion APSB13-03 Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...
phpweb injection+upload+install file vulnerability+universal password with repair programme-vulnerability warning-the black bar safety net
Author: lostowlf home: hi.baidu.com/nginxshell Test: sqlinjection http://www.phpweb.net/down/class/index.php?myord=1sqlinjection http://www.phpweb.net/photo/clas ... mp;key=&myord=1 sqlinjection getshell POST /kedit/uploadcgi/upload.php HTTP/1.0" Accept: image/gif, image/x-xbitmap, image/jpeg,...
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution
This module exploits the MiniUPnP 1.0 SOAP stack buffer overflow vulnerability present in the SOAPAction HTTP header handling. Module Options msf use exploit/linux/upnp/miniupnpd/soapbof msf undefinedsoapbof show actions ...actions... msf undefinedsoapbof set ACTION msf undefinedsoapbof show...
WebSite website management system V2. 0 universal password vulnerability-vulnerability warning-the black bar safety net
Background proof universal password vulnerability admin’/ The background information is added directly to upload a php to get SHELL 上传 后 目录 attachments/20130114/1358155986.php...
DEBIAN-CVE-2011-1165
Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks...
PT-2013-3045 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue arises from improper handling of objects in memory by Windows USB drivers, leading to an elevation of privilege. This could allow an attacker to execute arbitrary code in kernel...
Fyblogs website management system vulnerability-vulnerability warning-the black bar safety net
Vulnerability type: unauthorized access/permissions bypass Brief description: Fyblogs site management system,, the background presence of the Universal password, the back-end file management presence of the bypass. Lead to browse to where the letter information. Information leaked! Detailed...