Progress OpenEdge 11.2 - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Progress OpenEdge Directory Traversal Date: 30/10/2014 Exploit Author: Mauricio Correa Vendor Homepage: www.progress.com Software Link: www.progress.com/products/openedge Version: 11.2 Tested on: Windows OS CVE : CVE-2014-8555 T...

flash-plugin: multiple code execution or security bypass flaws (APSB14-18)

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...

“Invalid Credentials” Error Adding a Hyper-V Host Using a Local Account

Article Applicability This article relates to an error that only occurs when Veeam Backup & Replication is deployed on a Windows machine. With the Veeam Software Appliance, to add a Hyper-V host using credentials, it requires that both the appliance and the Windows machine are added to the same...

HP Data Protector Manager 8.10 - Remote Command Execution

!/usr/bin/python Exploit Title: HP-Data-Protector-8.10 Remote command execution. Date: July 11 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Exploit Author: Henoch Chanoc Barrera https://intrusionlabs.org Contacts: [email protected] and...

navicopa webserver 3.0.1 (bof/sd) Multiple Vulnerabilities

No description provided by source. NaviCopa webserver 3.0.1 Multiple Vulnerabilities By: e.wiZz! Bosnian Idiot FTW! Mail: [email protected] Greetz goes to GYEZyou know who you are lol In the wild... Vendor site: http://www.navicopa.com/ Platforms: Windows OS only Info: Award Winning NaviCOPA is...

Microsoft Plug and Play Service Overflow

No description provided by source. $Id: ms05039pnp.rb 10190 2010-08-30 20:40:05Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Savant Web Server 3.1 - Remote BoF (French Win OS support)

No description provided by source. Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! FRench Win OS support by Jerome Athias import struct import socket sc = \x90 21 We need this number of...

SasCam 2.6.5 - Remote HTTP Server Crash

No description provided by source. / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! Also the free software programs provided by fl0 fl0w may be freely distributed and that the disclaimer below is always attached to it. The...

DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflow

No description provided by source. $Id: djvuimageurl.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

TFTPD32 <= 2.21- Long Filename Buffer Overflow

No description provided by source. $Id: tftpd32longfilename.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

yaws 1.89 - Directory Traversal vulnerability

No description provided by source. Exploit Title: Yaws 1.89 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://yaws.hyber.org/download/Yaws-1.89-windows-installer.exe Version: 1.89 Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

3Dmax 6.x backburner Manager <= 2.2 - Denial of Service Exploit

No description provided by source. 3Dmax backburner Manager Dos Exploit There are security hole in 3Dmax backburner Manager Default listen port is 3234. It's can be Dos by long string Tested on Version 3dmax 5.0 backburner Manager Version 2.0 3dmax 6.0 backburner Manager Version 2.2 3dmax 6.0 SP1...

PHP <= 5.4.3 - wddx_serialize_* / stream_bucket_* Variant Object Null Ptr Derefernce

No description provided by source. ?php / PHP = 5.4.3 wddxserialize / streambucket Variant Object Null Ptr Derefernce Author : condis Date : 10.04.2012 AD Website : http://cond.psychodela.pl ---- Download : http://php.net/downloads.php Tested on: PHP 5.3.8 + Windows XP SP3 Professional PL PHP...

Windows OS Detection Via DHCP

Binary data 8311.prm...

flash-plugin: multiple cross-site scripting flaws (APSB14-16)

Cross-site scripting XSS vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to...

flash-plugin: security protection bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518,...

BarracudaDrive 6.7.1 Cross Site Scripting Vulnerability

BarracudaDrive version 6.7.1 suffers from multiple persistent and reflective cross site scripting vulnerabilities Title : BarracudaDrive Multiple XSS Vulnerabilities Author : Shakeel Bhat SecPod Technologies Pvt. Ltd. http://www.secpod.com Vendor : http://barracudadrive.com Advisory :...

BarracudaDrive 6.7.1 Cross Site Scripting

Title : BarracudaDrive Multiple XSS Vulnerabilities Author : Shakeel Bhat SecPod Technologies Pvt. Ltd. http://www.secpod.com Vendor : http://barracudadrive.com Advisory : http://secpod.org/blog/?p=2309 http://secpod.org/advisories/SecPodAdvistoryBarracudaDrive6.7.1MultXSSVuln.txt Software :...

Automount is Disabled on VMware Backup Proxy

Challenge The Windows OS of a VMware Backup Proxy reports that automatic mounting of new volumes is disabled. Solution The automatic mounting of new volumes being disabled is an expected outcome for VMware Backup Proxies. As documented in the Veeam Backup & Replication User Guide: For Microsoft...

Atlassian JIRA < 6.0.5 Multiple Vulnerabilities

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to version 6.0.5. It is, therefore, potentially affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the Admin Panel due to a failure to sanitiz...