4728 matches found
AccessDiver 4.301 Build 5888 Buffer Overflow
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ACCESSDIVER-BUFFER-OVERFLOW.txt Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is...
AccessDiver 4.301 - Buffer Overflow
Exploit for windows platform in category dos / poc + Credits: hyp3rlinx Vendor: ============== M. Jean Fages www.accessdiver.com circa 1998-2006 Product: ============================= AccessDiver V4.301 build 5888 AccessDiver is a security tester for Web pages. It has got a set of tools which wil...
Knot DNS < 1.6.3 Multiple Vulnerabilities
The remote host is running a version of Knot DNS prior to 1.6.3. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the knotrrsetrrtocanonical function. An unauthenticated, remote attacker can exploit this, via a specially crafted packet, to disclose...
Article Script 1.00 SQL Injection
Exploit Title : Article Script SQL Injection Vulnerability Exploit Author : Linux Zone Research Team Vendor Homepage: http://articlesetup.com/ Google Dork : inurl:/article.php?id= intext:Powered By Article Marketing Software Link : http://www.ArticleSetup.com/downloads/ArticleSetup-Latest.zip Dat...
WordPress Tierra Billboard Manager 1.14 SQL Injection
Exploit Title : Wordpress Plugin Tierra Billboard Manager SQL Injection Vulnerability Exploit Author : Linux Zone Research Team Date : 14-December-2015 Vendor Homepage: https://wordpress.org Software Link : https://wordpress.org/plugins/tierra-billboard-manager/ Version : 1.14 Tested on : Linux -...
How to Set the Time Zone of the NetScaler Appliance to UTC Time Zone
This article contains the procedure to change the time zone of the NetScaler appliance to Coordinated Universal Time UTC if the appliance is set to another time zone. When setting the appliance to the UTC time zone, it can be confusing to refer to a relevant city. To avoid such uncertainty, you c...
sudo: unsafe handling of TZ environment variable
It was discovered that sudo did not perform any checks of the TZ environment variable value. If sudo was configured to preserve the TZ environment variable, a local user with privileges to execute commands via sudo could possibly use this flaw to achieve system state changes not permitted by the...
Bluto - DNS Recon, DNS Zone Transfer, and Email Enumeration
BLUTO DNS recon | Brute forcer | DNS Zone Transfer | Email Enumeration The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto wil...
NXFilter 3.0.3 - CSRF Vulnerabilities
Exploit for jsp platform in category web applications Vendor: ================================ www.nxfilter.org/p2/ Product: ================================ NXFilter v3.0.3 Vulnerability Type: ================================= Cross site request forgery - CSRF Vulnerability Details:...
BIND: Denial of service
Background BIND Berkeley Internet Name Domain is a Name Server. Description A vulnerability has been discovered in BIND’s named utility leading to a Denial of Service condition. Impact A remote attacker may be able to cause Denial of Service condition via specially constructed zone data. Workarou...
DEBIAN-CVE-2015-5722
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone...
USN-2728-1 bind9 vulnerability
Hanno Böck discovered that Bind incorrectly handled certain malformed keys when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service...
UBUNTU-CVE-2015-5722
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone...
indiatradezone.com XSS vulnerability
Vulnerable URL: http://indiatradezone.com/search/searchresults.asp?Srchstr=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=ALL=ALL===SLR Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:25 GMT Vulnerability type:| XSS Vulnerability status:|...
Microsoft Word Local Machine Zone Remote Code Execution Vulnerability
Microsoft Word, Excel, and Powerpoint 2007 contain a remote code execution vulnerability because it is possible to reference documents such as Works document .wps as HTML. It will process HTML and script code in the context of the local machine zone of Internet Explorer which leads to arbitrary...
sudo: unsafe handling of TZ environment variable
It was discovered that sudo did not perform any checks of the TZ environment variable value. If sudo was configured to preserve the TZ environment variable, a local user with privileges to execute commands via sudo could possibly use this flaw to achieve system state changes not permitted by the...
Oracle solaris S10 Branded Zone Component Denial of Service Vulnerability
Oracle solaris is a unix operating system. A security vulnerability exists in the Oracle solaris S10 Branded Zone component that could be exploited by a local attacker to crash the system...
CVE-2015-2589
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to S10 Branded Zone...
