Lucene search
+L

3300 matches found

0day.today
0day.today
added 2012/09/22 12:0 a.m.16 views

ZEN Load Balancer Filelog Command Execution

Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

7.1AI score
SaveExploits0
Metasploit
Metasploit
added 2012/09/10 2:46 p.m.62 views

Winamp MAKI Buffer Overflow

This module exploits a stack based buffer overflow in Winamp 5.55. The flaw exists in the genff.dll and occurs while parsing a specially crafted MAKI file, where memmove is used in an insecure way with user controlled data. To exploit the vulnerability the attacker must convince the victim to...

9.3CVSS7.2AI score0.36337EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2012/06/27 12:0 a.m.52 views

SugarCRM 6.3.1 unserialize() PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SugarCRM %q This module exploits a ph...

0.5AI score0.67256EPSS
SaveExploits13
Zero Day Initiative
Zero Day Initiative
added 2011/10/26 12:0 a.m.40 views

Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists because Java does not...

9CVSS6.1AI score0.05445EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2011/04/13 12:0 a.m.35 views

CA Total Defense Suite Heartbeat Web Service Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Endpoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within CA.Itm.Server.ManagementWS.dll. Due to a failure to properly sanitize...

10CVSS3.4AI score0.11423EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2010/11/11 12:49 a.m.9 views

Watcher 1.4.1 - latest version download

"Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

6.7AI score
SaveExploits0
0day.today
0day.today
added 2010/08/03 12:0 a.m.21 views

Avast! 5.0 aswFW.sys kernel driver IOCTL Memory Pool Corruption

Exploit for windows platform in category dos / poc ================================================================================= Avast! Internet Security 5.0 aswFW.sys kernel driver IOCTL Memory Pool Corruption =================================================================================...

7AI score
SaveExploits0
exploitpack
exploitpack
added 2010/08/03 12:0 a.m.13 views

Avast! Internet Security 5.0 - aswFW.sys Kernel Driver IOCTL Memory Pool Corruption

Avast! Internet Security 5.0 - aswFW.sys Kernel Driver IOCTL Memory Pool Corruption +-------------------------------------------------------------------------------------+ | Avast! Internet Security 5.0 'aswFW.sys' kernel driver IOCTL Memory Pool Corruption |...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/08/03 12:0 a.m.21 views

Avast! Internet Security 5.0 Denial Of Service

+-------------------------------------------------------------------------------------+ | Avast! Internet Security 5.0 'aswFW.sys' kernel driver IOCTL Memory Pool Corruption | +-------------------------------------------------------------------------------------+ Tested Platform: Avast! Internet...

7.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2010/06/08 12:0 a.m.53 views

Microsoft Office Excel SxView Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious document. The specific flaw exists in the parsing of SXVIEW records in an...

10CVSS5.3AI score0.24265EPSS
SaveExploits2
securityvulns
securityvulns
added 2010/04/19 12:0 a.m.20 views

Micropoint Proactive Denfense privilege escalation

User-controlled kernel memory access on IOCTL processing...

3.9AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2010/01/11 12:0 a.m.22 views

Simply Classified 0.2 Cross Site Request Forgery / Cross Site Scripting

Simply Classified 0.2 XSS & CSRF Vulnerabilities Download: http://www.hotscripts.com/listing/simplyclassifieds/ Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory:...

SaveExploits0
Exploit DB
Exploit DB
added 2010/01/10 12:0 a.m.26 views

Simply Classified 0.2 - Cross-Site Scripting / Cross-Site Request Forgery

Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory: http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-002-simply-classifieds-v0.2-xss-and-csrf/ Greetz...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/07/20 12:0 a.m.32 views

GLSA-200907-16 : Python: Integer overflows

The remote host is affected by the vulnerability described in GLSA-200907-16 Python: Integer overflows Chris Evans reported multiple integer overflows in the expandtabs method, as implemented by 1 the stringexpandtabs function in Objects/stringobject.c and 2 the unicodeexpandtabs function in...

10CVSS6.2AI score0.02758EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2008/05/01 12:0 a.m.19 views

GLSA-200804-30 : KDE start_kdeinit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-30 KDE startkdeinit: Multiple vulnerabilities Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact : A local attacker could possibly execute...

4.6CVSS6.1AI score0.00626EPSS
SaveExploits2References2
Gentoo Linux
Gentoo Linux
added 2008/04/29 12:0 a.m.33 views

KDE start_kdeinit: Multiple vulnerabilities

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. startkdeinit is a wrapper for kdeinit. Description Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact A loca...

4.6CVSS7.2AI score0.00626EPSS
SaveExploits2
securityvulns
securityvulns
added 2008/04/17 12:0 a.m.27 views

XPDF / Poppler uninitialized pointer dereference

User-controlled pointer dereference...

6.8CVSS2.9AI score0.04941EPSS
SaveExploits1References1Affected Software3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.12 views

Debian: Security Advisory (DSA-681-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.1AI score0.00369EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2007/08/27 12:0 a.m.21 views

clamav-milter shell characters vulnerability

Insecure popen call with user-controlled value...

2.9AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2007/01/09 12:0 a.m.70 views

Opera browser multiple security vulnerabilities

Memory corruption on JPEG parsing, function call via user-controlled pointer...

9.3CVSS5.1AI score0.10966EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder