Security feature bypass

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

CVE-2020-20675

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...

Sql injection

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...

CVE-2020-20675

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...

CVE-2020-20675

Nuishop v2.3 is affected by an SQL injection in /goods/getGoodsListByConditions/. The vulnerability is caused by unsafely handling input in that endpoint, enabling attackers to manipulate database queries. Documented impact indicates high severity (CVSS 3.1: CRITICAL, 9.8) and high for confidenti...

SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_lm***_ad***.php

yycms is a movie and television system. yycms film and television system V2.3 version admin directory yylmad.php SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

CVE-2019-16265

CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow...

Buffer overflow

CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow...

CVE-2019-16265

CODESYS ENI Server (3S-Software) is affected by CVE-2019-16265 via a stack-based buffer overflow in V2.3 ENI Server up to V3.2.2.24. Exploitation could allow remote code execution; crashes are also possible. Vulnerable product versions include CODESYS ENI Server 3.2.2.24 and earlier (3.2.2.25+ ap...

CVE-2019-16265

CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow...

Encrypt PDF 2.3 - Denial of Service (PoC)

Encrypt PDF 2.3 - Denial of Service PoC -- coding: utf-8 -- Exploit Title: Encrypt PDF v2.3 - Denial of Service PoC Date: 19/05/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.verypdf.com Software: http://www.verypdf.com/encryptpdf/encryptpdf.exe Version: 2.3 Tested on: Windows 10 Proo...

Encrypt PDF 2.3 - Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: Encrypt PDF v2.3 - Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: http://www.verypdf.com Software: http://www.verypdf.com/encryptpdf/encryptpdf.exe Version: 2.3 Tested on: Windows 10 Proof of Concept: 1.- Run the python script "EncryptPDF.py", ...

Security Bulletin: SmartCloud Orchestrator - Multiple security vulnerabilities exist in the IBM SDK, Java™ Technology Edition (CVE-2013-5802, CVE-2013-5772, CVE-2014-0411)

Summary IBM SmartCloud Orchestrator is shipped with an IBM SDK that is based on Oracle JDK. Oracle released October 2013 and January 2014 critical patch updates CPU, which contain security vulnerability fixes. IBM SDK, Java™ Technology Edition, has been updated to include those fixes. The IBM SDK...

Security Bulletin: IBM SmartCloud Orchestrator - OpenStack Compute SSL information disclosure (CVE-2013-6491)

Summary An attacker might exploit this vulnerability using man-in-the-middle techniques to obtain sensitive information. The python-qpid client common/rpc/implqpid.py in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpidprotocol is set to ssl. It allows remote attackers to...

CVE-2016-8359

CVE-2016-8359 affects Moxa ioLogik E1200 series and E2200 series devices (various firmware versions prior to updated releases). The issue is Cross-site Scripting due to the web application not sanitizing user input, potentially allowing an attacker to inject script or execute arbitrary code. The ...

KonyaSoft 2.3 Database Disclosure

======================================================================== | Title : KonyaSoft v2.3 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.3 | Vendor :...

[SECURITY] Fedora 21 Update: python-eyed3-0.7.4-4.fc21

A Python module and program for processing ID3 tags. Information about mp3 filesi.e bit rate, sample frequency, play time, etc. is also provided. The formats supported are ID3 v1.0/v1.1 and v2.3/v2.4...

SEC Consult SA-20140710-3 :: Design Issue / Password Disclosure in WAGO-I/O-SYSTEM with CODESYS V2.3 WebVisu

SEC Consult Vulnerability Lab Security Advisory 20140710-3 ======================================================================= title: Design Issue / Password Disclosure product: All WAGO-I/O-SYSTEMs which provide a CODESYS V2.3 WebVisu vulnerable version: Systems which are programmable with =...

HttpFileServer v2.3 /search 命令执行漏洞

访问http://localhost:80/?search==%00.exec|cmd. 直接执行命令漏洞利用过程访问地址http://127.0.0.1/?search==%00.exec|cmd /c net user testsuw@Dmin123! /add.http://127.0.0.1/?search==%00.exec|cmd /c net localgroupadministrators test123 /add...

CoDeSys SCADA 2.3 - Remote Exploit

No description provided by source. / See Also: http://aluigi.altervista.org/adv/codesys1-adv.txt CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP SP1 EN TH...