PHP-Charts 1.0 - index.php?type Remote Code Execution

PHP-Charts 1.0 - index.php?type Remote Code Execution !/usr/bin/python Original Advisory came from: http://packetstormsecurity.com/files/119582/PHP-Charts-1.0-Code-Execution.html infodox - insecurety.net import requests import random import threading import sys def genpayloadhost, port: """ Perl...

Debian Security Advisory DSA 2714-1 (kfreebsd-9 - programming error)

Konstantin Belousov and Alan Cox discovered that insufficient permission checks in the memory management of the FreeBSD kernel could lead to privilege escalation. OpenVAS Vulnerability Test $Id: deb2714.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2714-1 using nvtgen...

Symantec Endpoint Protection Manager/Protection Center 12.x Buffer Overflow

SUMMARY A dynamic link library dll in the Symantec Endpoint Protection Manager SEPM 12.1.x server and Symantec Protection Center SPC 12.0.x Small Business Edition server does not properly validate all external input. This could potentially result in a buffer overflow and remote code execution wit...

Debian Security Advisory DSA 2698-1 (tiff - buffer overflow)

Multiple issues were discovered in the TIFF tools, a set of utilities for TIFF image file manipulation and conversion. CVE-2013-1960 Emmanuel Bouillon discovered a heap-based buffer overflow in the tpprocessjpegstrip function in the tiff2pdf tool. This could potentially lead to a crash or arbitra...

Havalite CMS 1.1.7 - Unrestricted Arbitrary File Upload

Havalite CMS 1.1.7 - Unrestricted Arbitrary File Upload ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit...

[pweb-suite] Perl based web application penetration testing tools

Written completely in Perl, this suite of tools covers a lot of the basics for penetration testing and vulnerability detection automation. This Suite formerly known as the "pCrack Suite" of tools is used primarily or web application vulnerability testing. xssPlay in Action! YouTube Download...

global_redirect

This plugin finds global redirection vulnerabilities. This kind of bugs are used for phishing and other identity theft attacks. A common example of a global redirection would be a script that takes a "url" parameter and when requesting this page, a HTTP 302 message with the location header to the...

buffer_overflow

This plugin finds buffer overflow vulnerabilities. Users have to know that detecting a buffer overflow vulnerability will be only possible if the server is configured to return errors, and the application is developed in cgi-c or some other language that allows the programmer to do their own memo...

response_splitting

This plugin will find response splitting vulnerabilities. The detection is done by sending "w3af\r\nVulnerable: Yes" to every injection point, and reading the response headers searching for a header with name "Vulnerable" and value "Yes". Plugin type Audit Options This plugin doesnt have any user...

format_string

This plugin finds format string bugs. Users have to know that detecting a format string vulnerability will be only possible if the server is configured to return errors, and the application is developed in cgi-c or some other language that allows the programmer to do this kind of mistakes. Plugin...

PT-2013-59: XML External Entities Injection in Huawei M2000

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Huawei M2000. An XML document may contain a Document Type Definition that, among other features, allows the definition of external entities. A malicious user may perform attacks aimed...

Debian Security Advisory DSA 2692-1 (libxxf86vm - several vulnerabilities)

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...

PT-2013-52: XML External Entities Injection in Huawei SGSN USN9810

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Huawei SGSN USN9810. An XML document may contain a Document Type Definition that, among other features, allows the definition of external entities. A malicious user may perform attack...

Debian Security Advisory DSA 2663-1 (tinc - stack based buffer overflow)

Martin Schobert discovered a stack-based vulnerability in tinc, a Virtual Private Network VPN daemon. When packets are forwarded via TCP, packet length is not checked against the stack buffer length. Authenticated peers could use this to crash the tinc daemon and maybe execute arbitrary code. Not...

Debian Security Advisory DSA 2655-1 (rails - several vulnerabilities)

Several cross-site-scripting and denial of service vulnerabilities were discovered in Ruby on Rails, a Ruby framework for web application development. OpenVAS Vulnerability Test $Id: deb2655.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2655-1 using nvtgen 1.0 Script...

PT-2013-23: Sensitive Information Disclosure in SAP NetWeaver

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in SAP NetWeaver. Thus, obtaining access to the SAP server access to the table RSECTAB is required, an attacker can retrieve passwords to access other SAP systems, for which RFC...

Debian Security Advisory DSA 2644-1 (wireshark - several vulnerabilities)

Multiple vulnerabilities were discovered in the dissectors for the MS-MMS, RTPS, RTPS2, Mount, ACN, CIMD and DTLS protocols, which could result in denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2644.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated...

Server: Privilege escalation in the calendar application

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calid" GET parameter to export.php in /apps/calendar/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Debian Security Advisory DSA 2627-1 (nginx - information leak)

Juliano Rizzo and Thai Duong discovered a weakness in the TLS/SSL protocol when using compression. This side channel attack, dubbed CRIME , allows eavesdroppers to gather information to recover the original plaintext in the protocol. This update to nginx disables SSL compression. OpenVAS...

Debian Security Advisory DSA 2620-1 (rails - several vulnerabilities)

Two vulnerabilities were discovered in Ruby on Rails, a Ruby framework for web application development. CVE-2013-0276 The blacklist provided by the attrprotected method could be bypassed with crafted requests, having an application-specific impact. CVE-2013-0277 In some applications, the...