TI Online Examination System 2.0 - SQL Injection

TI Online Examination System 2.0 - SQL Injection Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo:...

Haraj v2 Script Shell Upload Vulnerability

Exploit for php platform in category web applications |----------------------------| | xBADGIRL21 | | N3W PUBLIC 3XPL0IT | | , | | 0day T == -- | | /-' | | // | | x21 | |----------------------------| | Exploit Title : Haraj v2 Script Shell Upload Vulnerability | Exploit Author : xBADGIRL21 | Dork...

Git < 2.0 Privilege Escalation Vulnerability - Windows

Git is prone to a privilege escalation vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EZGallery Resim Galerisi Scripti 2.0 Database Disclosure

======================================================================== | Title : EZGallery v2.0 Resim Galerisi Scripti Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.0 | Vendor :...

IBM Security Privileged Identity Manager Virtual Appliance Security Bypass Vulnerability

IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...

IBM Security Privileged Identity Manager Virtual Appliance Denial of Service Vulnerability

IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...

VMware Identity Manager and vRealize Automation Local Elevation of Privilege Vulnerability

VMware Identity Manager and vRealize Automation are both products of VMware, Inc. The former is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and single sign-on SSO for SaaS, web, cloud, and native mobile applications, while the latter is a...

ALPINE-CVE-2016-6511

epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service OpenFlow dissector large loop via a crafted packet...

Novell Filr Insecure File Permissions Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A security vulnerability exists in Novell Filr 1.2 Security Update 2 and earlier and 2.0 Security Update 1 and earlier, which originates from a program that assigns global file '/etc/profile.d/vainit.sh'. This...

IBM Security Privileged Identity Manager Virtual Appliance Sensitive Information Access Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

Wireshark IEEE 802.11 Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the IEEE 802.11 parser in Wireshark versions 1.12.x before 1.12.11 and 2.0.x before 2.0.3 can be exploited by a remote attacker to cause a denial of...

Wireshark TShark Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the epan/reassemble.c file in TShark versions 2.0.x prior to Wireshark 2.0.3 can be exploited by a remote attacker to cause a denial of service reuse...

Wireshark PKTC Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in the epan/dissectors/packet-pktc.c file in the PKTC parser in Wireshark versions 1.12.x prior to 1.12.11 and 2.0.x prior to 2.0.3 can be exploited by a...

Wireshark Denial of Service Vulnerability (CNVD-2016-01445)

Wireshark is the most popular network protocol parser. A denial-of-service vulnerability exists in version 2.0.x prior to Wireshark 2.0.2 that allows remote attackers to cause a denial of service via a crafted file...

DEBIAN-CVE-2016-2530

The dissctrslipaccessmsg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via...

CVE-2016-2525

epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

Wireshark Multiple Denial-of-Service Vulnerabilities-01 (Jan 2016) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wireshark Sniffer File Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. Wireshark version 2.0.x prior to 2.0.1 and version 1.12.x prior to 1.12.9 The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser fails to correctly validate the relationship between the length of the record and...

Wireshark NWP Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The dissectnwp function in the NWP parser epan/dissectors/packet-nwp.c in version 2.0.x prior to Wireshark 2.0.1 incorrectly handles the type of packet, allowing remote attackers to cause a denial of service application crash via specially...

CVE-2015-8740

The dissecttds7colmetadatatoken function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted packet...