Lucene search
+L
SeebugMost viewed

56796 matches found

seebug.org
seebug.org
added 2009/04/30 12:00 a.m.81 views

DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755 CVE ID:CVE-2009-0663 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg存在基于堆的缓冲区溢出,远程攻击者可以利用漏洞执行任意代码。 使用pggetline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux...

7.5CVSS0.4AI score0.04347EPSS
SaveExploits1
seebug.org
seebug.org
added 2008/09/28 12:00 a.m.81 views

帝国ECMS V5 /e/member/list/index.php注入漏洞

帝国ECMS /e/member/list/index.php文件: if$sear $keyboard=RepPostVar2$GET'keyboard'; if$keyboard $add.=$where.$userusername." like '%$keyboard%'"; $search.="&sear=1&keyboard=$keyboard"; 判断sear参数是否存在,然后直接去keyboard的参数,然后再判断keyboard值是否为空,如果不为 空就直接把keyboard带入查询产生注射漏洞. 帝国ECMS V5 暂无...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/09/17 12:00 a.m.81 views

趋势科技OfficeScan cgiRecvFile.exe栈溢出漏洞

BUGTRAQ ID: 31139 CVECAN ID: CVE-2008-2437 OfficeScan是一种针对整个网段的分布式杀毒软件。 OfficeScan的cgiRecvFile.exe中存在栈溢出漏洞,如果远程攻击者在提交的HTTP请求中包含了超长的ComputerName参数的话,就可以触发这个溢出,导致执行任意指令。必须还要控制TempFileName、NewFileSize和Verify参数才能利用这个漏洞。 Trend Micro OfficeScan 7.3 patch 4 build 1362 Trend Micro -----------...

10CVSS6.4AI score0.06673EPSS
SaveExploits5
seebug.org
seebug.org
added 2007/09/14 12:00 a.m.81 views

Joomla Component joomlaradio v5 Remote File Inclusion Vulnerability

No description provided by source. Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5"...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/03/10 12:00 a.m.82 views

Grayscale Blog 0.8.0 (Security Bypass/SQL/XSS) Multiple Remote Vulns

No description provided by source. Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0 Date : 2007-02-24 Product : Grayscale Blog Version : 0.8.0 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/gsblogger/ - http://www.karlcore.com/programming/blog/...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/02/07 12:00 a.m.81 views

Samba延迟CIFS文件打开拒绝服务漏洞

Samba是一套实现SMB(Server Messages Block)协议、跨平台进行文件共享和打印共享服务的程序。 Samba的延迟文件打开机制的实现上存在漏洞,远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击。 Samba的文件服务守护程序smbd支持延迟文件打开调用。在某些环境下重新命名文件时可能没有从延迟的打开队列删除请求,这样smbd就会陷入试图处理打开请求服务的死循环。如果已认证用户打开了多个CIFS会话的话,每个会话都会生成新的smbd进程,每个连接都会陷入死循环,这样就会导致在服务器上耗尽内存和CPU资源。 Samba 3.0.6 - 3.0.23d 厂商补丁:...

6.8CVSS0.1AI score0.0459EPSS
SaveExploits1
seebug.org
seebug.org
added 2007/01/30 12:00 a.m.81 views

Linux-PAM pam_unix.so绕过认证漏洞

可插拔认证模块(PAM)是用于认证用户的机制,使用在多种Linux版本上。 Linux-PAM的modules/pamunix/support.c文件中unixverifypassword函数在验证用户口令时存在漏洞,远程攻击者可能利用此漏洞获取非授权访问。 如果口令文件中的哈希为“!!”或类似的话,用户就可以以任意口令登录。 Linux-PAM Linux-PAM 0.99.7.0 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/12/19 12:00 a.m.81 views

MailEnable POP服务PASS命令远程栈溢出漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable的POP服务在处理传送给PASS命令的参数时存在栈溢出漏洞,远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者发送了超长的畸形命令的话,就可以触发这个溢出,导致执行任意指令。 MailEnable MailEnable Professional Edition 2.35 MailEnable MailEnable Enterprise Edition 2.35 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/12/16 12:00 a.m.81 views

Premod Shadow Functions_Portal.PHP远程文件包含漏洞

Premod Shadow是一款基于PHP的WEB应用程序。 Premod Shadow不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'FunctionsPortal.PHP'脚本对用户提交的'phpbbrootpath'参数缺少过滤,提交恶意的远程服务器作为包含对象,可导致以WEB进程权限执行任意PHP代码。 Premod Shadow Premod Shadow 2.7.1 http://premod-shadow.info/...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/12/08 12:00 a.m.81 views

Microsoft Windows Print Spooler GetPrinterData拒绝服务漏洞

Microsoft Windows 2000是一款流行的操作系统。 Microsoft Windows spoolss GetPrinterData存在设计错误,远程攻击者可以利用漏洞进行拒绝服务攻击。 问题存在于GetPrinterData函数中,由于存在内存分配错误,可导致系统崩溃,造成拒绝服务攻击。 Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000...

7AI score
SaveExploits0
seebug.org
seebug.org
added 2006/09/16 12:00 a.m.81 views

Mambo com_registration_detailed <= 4.1 Remote File Include

No description provided by source. Mambo comregistrationdetailed = 4.1 Remote File Inclusion Download Source : http://mamboxchange.com/projects/regdetailed/ Dork = allinur:comextendedregistration Found By: k1tk4t - k1tk4td0th4ck4tgmaild0tcom Location: Indonesia file ; registrationdetailed.inc.php...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/08/17 12:00 a.m.81 views

Oracle SYS.DBMS_METADATA_UTIL软件包SQL注入漏洞

Oracle Database是一款商业性质大型数据库系统。 Oracle SYS.DBMSMETADATAUTIL软件包的LONG2VARCHAR、LONG2VCMAX、LONG2VCNT和LONG2CLOB函数中存在4个SQL注入漏洞。成功利用这些漏洞的远程攻击者可以完全入侵受影响的数据库系统。 Oracle 10g Release 1 Oracle ------ Oracle已经为此发布了一个安全公告(cpujan2006)以及相应补丁: cpujan2006:Oracle Critical Patch Update - January 2006...

6.9AI score
SaveExploits0
seebug.org
seebug.org
added 2021/04/08 12:00 a.m.80 views

天清入侵防御系统 弱口令漏洞

...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2018/06/26 12:00 a.m.80 views

Emerson Liebert IntelliSlot Web Card family delivers enhanced communications and control to Liebert UPS,AC Power and Thermal Management systems Unauthorized access

Emerson Liebert IntelliSlot Web Card family delivers enhanced communications and control to Liebert UPS,AC Power and Thermal Management systems Unauthorized access。Lots of them No authentication required and The Management configuration uses the default password. Liebert:Liebert devices in ZoomEy...

2AI score
SaveExploits0
seebug.org
seebug.org
added 2017/12/26 12:00 a.m.80 views

Tplink Bridge Authenticated RCE

Vulnerability: Command Injection in bridge.lua ------------------------------------------ Exploitation: Can remote command execution on the root shell. ------------------------------------------ Vendor of Product: Tp-Link router ------------------------------------------ Affected Products and...

8.2AI score
SaveExploits0
seebug.org
seebug.org
added 2017/12/15 12:00 a.m.80 views

Linksys WVBR0 25 Command Injection(CVE-2017-17411)

In this guest blog, Trend Micro DVLabs researcher Ricky Lawshae discusses the recently disclosed CVE-2017-17411. He discovered and reported this bug through the ZDI program. Earlier this year, I learned that AT&T was starting to move customers away from its U-Verse service in favor of its DirecTV...

10CVSS10AI score0.87929EPSS
SaveExploits9
seebug.org
seebug.org
added 2017/12/11 12:00 a.m.80 views

APPCMS comment.php文件SQL注入

AppCMS 官网:http://www.appcms.cc/ 审计版本:2.0.101 下载连接:http://www.appcms.cc/download/appcms2.0.101.zip AppCMS comment.php SQL Injection 0x00 前言 一开始是在cnvd()上看到有人提交这个漏洞没有详情,去官网下载源码本地审计没有审计出来;一次偶然的机会看到@Thinking分享的文章,才知道服务器端获取的“HTTPCLIENTIP”值是http头中“CLIENT-IP”字段的值是可伪造的!看到这个就恍然大悟了 0x01 分析...

7.6AI score
SaveExploits0
seebug.org
seebug.org
added 2017/10/17 12:00 a.m.80 views

Apple Image I/O EXR Color Component Remote Code Execution Vulnerability(CVE-2016-4629)

SUMMARY An exploitable heap based buffer overflow exists in the handling of EXR images on OS X. A crafted EXR document can lead to a heap based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved EXR file delivered by other means when opened in any...

10CVSS9.7AI score0.07418EPSS
SaveExploits2
seebug.org
seebug.org
added 2017/10/17 12:00 a.m.80 views

Microsoft Windows Kernel Local Information Disclosure Vulnerability(CVE-2017-11784)

One kernel memory disclosure in the exception handling code has already been discovered and reported as issue 1177 . It was fixed in the June Patch Tuesday as CVE-2017-8482. However, it seems there is another bug in this code area, this time a pool as opposed to stack memory leak. We've had some...

2.1CVSS5.8AI score0.03713EPSS
SaveExploits5
seebug.org
seebug.org
added 2017/10/16 12:00 a.m.80 views

Windows KEPT remote code execution vulnerability analysis(CVE-2017-11779)

根据 Microsoft 安全通告,多个版本 Windows 中的 DNSAPI.dll 在处理 DNS response 时可导致 SYSTEM 权限 RCE。 以 DNS Client API DLL 10.0.15063.0 与 10.0.15063.674 为例,补丁对比, 可知漏洞存在于 DNSAPI.dll 中的 Nsec3RecordRead 函数,那么可以确定问题就是出在解析 DNS response 的 NSEC3 Resource record,为了构造 PoC,先得了解这个 "NSEC3" 的背景。首先,DNS 协议数据结构如下图所示, 例如,当访问...

9.3CVSS8.2AI score0.33338EPSS
SaveExploits1
seebug.org
seebug.org
added 2017/10/11 12:00 a.m.80 views

HDF5 Group libhdf5 Shareable Message Type Code Execution Vulnerability(CVE-2016-4332)

Description HDF5 is a file format that is maintained by a non-profit organization, The HDF Group. HDF5 is designed to be used for storage and organization of large amounts of scientific data and is used to exchange data structures between applications in industries such as the GIS industry via...

6.9CVSS8.6AI score0.00812EPSS
SaveExploits2
seebug.org
seebug.org
added 2016/05/24 12:00 a.m.80 views

phpwind9.x 通讯秘钥安全漏洞

来源链接:phpwind 利用哈希长度扩展攻击进行getshell 一哥新发的漏洞,还是蛮屌的: http://www.wooyun.org/bugs/wooyun-2016-0210850。分析补丁( http://www.phpwind.net/read/3709549 )加上一些风闻,我得知利用的是哈希长度扩展攻击。之前CTF中经常出境的MD5 Length Extension Attack,终于在实战中露了一次面。 0x01 漏洞点分析 phpwind逻辑太冗杂了,一看就是java程序员开发的。...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/05/11 12:00 a.m.80 views

D-Link DAR-8000/DAR-7000系列上网行为审计网关 任意文件上传

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/22 12:00 a.m.80 views

shopnc o2o版 index.php?act=payment&op=notify SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/18 12:00 a.m.80 views

AnyMacro G7 版本存储型XSS

简要描述: RT 详细说明: 邮件系统的网盘功能-文件中心-上传文件-共享文件功能存在存储型XSS漏洞 首先,上传一个文件,修改文件名为alertdocument.cookie.php 接着共享该文件,点击该链接即可触发该漏洞 漏洞证明: 邮件系统的网盘功能-文件中心-上传文件-共享文件功能存在存储型XSS漏洞 首先,上传一个文件,修改文件名为alertdocument.cookie.php 接着共享该文件,点击该链接即可触发该漏洞...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/05/19 12:00 a.m.80 views

致远协同OA 3.5 /seeyon/fileUpload.do 文件上传漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/02/11 12:00 a.m.80 views

mcms最新版SQL注入三枚打包(可出任意数据)

简要描述: mcms最新版SQL注入三枚打包(可出任意数据) 详细说明: 在wooyun上看到掌易科技终于不再忽略漏洞了,我也来凑凑热闹吧。去下了mcms的最新版(v3.1.0.enterprise),来研究研究。 注入一枚:POST /app/message/?m=savemessage post中有本个参数,虽然都经过了xss和sql的过滤,但是过滤的并不完全,我们看看是如何注入的。 看看代码/app/message/index.php function msavemessage global $dbm,$C,$V; $POST=H::sqlxss$POST;...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/01/28 12:00 a.m.80 views

74CMS 3.4 /plus/weixin.php 任意文件下载漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/11/12 12:00 a.m.80 views

DouPHP v1.1 /kindeditor/php/file_manager_json.php 备份文件发现漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/09/18 12:00 a.m.80 views

KesionCMS X1 /KS_Data/KesionCMSX1.mdb 数据库发现漏洞

默认的数据库文件在KSData目录下的 KesionCMSX1.mdb,攻击者可以直接下载。漏洞利用过程访问地址http://127.0.0.1/KSData/KesionCMSX1.mdb !/usr/bin/env python coding=utf-8 test: import urllib2 from comm import cmdline from comm import generic pocinfo = 'VulId' : '1503', webvul的ID号 'Name' : 'KesionCMS X1 /KSData/KesionCMSX1.mdb 数据库发现漏洞...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.80 views

WMAPM 3.1 Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8995/info wmapm has been reported prone to a local privilege escalation vulnerability. The vulnerability has been conjectured to result from a lack of relative path usage while the vulnerable dock app is invoking a third...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.80 views

wordpress <= 3.3.1 - Multiple Vulnerabilities

No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2012-002: Multiple Vulnerabilities in WordPress https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt Published: 1/24/12 Version: 1.0 Vendor: WordPress http://wordpress.org/ Product: WordPress Version...

7.5CVSS6.4AI score0.09551EPSS
SaveExploits10
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.80 views

PNphpBB2 <= 1.2g - (phpbb_root_path) Remote File Include Vulnerability

No description provided by source. Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.80 views

YaPiG 0.92 Remote Server-Side Script Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10891/info A vulnerability is reported to exist in YaPiG that may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue exists due to a lack if sanitization of user-supplied data. It is...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.80 views

Oracle <= 9i / 10g (extproc) - Local/Remote Command Execution Exploit

No description provided by source. -- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi [email protected] -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g --...

8.5CVSS0.3AI score0.13782EPSS
SaveExploits9
seebug.org
seebug.org
added 2014/04/25 12:00 a.m.80 views

大汉通版cms上传设计缺陷

简要描述: RT 详细说明: WooYun: 大汉jiep信息交换平台某处越权及sql注入 根据wefgod牛的测试站点进行测试得到的。 http://www.dx.gansu.gov.cn/cms/common/filechoose/filedialog.jsp?webappcode=A61&filetype=1&webapppath=freeform&uploadpath=../../../ 具体%00截图没有绕过上传jsp等脚本文件。 但是如果cms在iis下面可以触发iis解析漏洞,所以还是存在威胁的。 漏洞证明: Content-Disposition: form-data;...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/03/26 12:00 a.m.80 views

Check_MK 任意文件删除漏洞(CVE-2014-2332)

BUGTRAQ ID:66396 CVE ID:CVE-2014-2332 CheckMK是一款通用的Nagios/Icinga数据采集插件。 CheckMK 1.2.2p2及其他版本在实现上存在任意文件删除漏洞,成功利用后可使远程攻击者删除受影响应用上下文内的任意文件。 0 mathias-kettner checkmk 1.2.2p2 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://mathias-kettner.de...

5.5CVSS6.5AI score0.01433EPSS
SaveExploits1
seebug.org
seebug.org
added 2014/03/25 12:00 a.m.80 views

Linux Kernel &quot;rds_ib_laddr_check()&quot;空指针引用漏洞

CVE ID:CVE-2013-7339 Linux Kernel是一款开源的操作系统。 Linux Kernel "rdsibladdrcheck"函数net/rds/ib.c存在一个空指针引用错误,允许本地攻击者利用漏洞使内核崩溃,造成拒绝服务攻击。 0 Linux Kernel 2.6.32.61 用户可参考厂商的GIT库以获得补丁修复此漏洞: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c2349758acf1874e4c2b93fe41d072336f1a31d0...

4.7CVSS0.1AI score0.00476EPSS
SaveExploits2
seebug.org
seebug.org
added 2014/02/26 12:00 a.m.80 views

Apple Mac OS X多个安全漏洞(APPLE-SA-2014-02-25-1)

BUGTRAQ ID: 65777 CVECAN ID: CVE-2014-1254,CVE-2014-1262,CVE-2014-1255,CVE-2014-1256,CVE-2014-1257,CVE-2014-1258,CVE-2014-1261,CVE-2014-1263,CVE-2014-1265,CVE-2014-1259,CVE-2014-1264,CVE-2014-1260,CVE-2014-1246,CVE-2014-1247,CVE-2014-1248,CVE-2014-1249,CVE-2014-1250,CVE-2014-1245 OS X(前称Mac OS...

9.3CVSS6.4AI score0.04072EPSS
SaveExploits4
seebug.org
seebug.org
added 2013/09/26 12:00 a.m.80 views

Apache Struts 安全措施绕过漏洞

BUGTRAQ ID: 62584 CVECAN ID: CVE-2013-4310 Struts2 是第二代基于Model-View-Controller MVC模型的java企业级web应用框架。 Apache Struts 2.0.0-2.3.15.1的操作映射机制支持特殊参数前缀操作,这样有可能会在表格底部附加引导信息,在映射 "action:" 前缀操作时存在安全绕过漏洞,可被利用绕过某些安全限制,访问受限制功能。 0 Apache Group Struts 2.3.15.2 厂商补丁: Apache Group ------------ Apache...

5.8CVSS8AI score0.07517EPSS
SaveExploits1
seebug.org
seebug.org
added 2013/01/14 12:00 a.m.80 views

Oracle Java 7 JmxMBeanServer类远程代码执行漏洞

BUGTRAQ ID: 57246 CVE ID: CVE-2013-0422 Oracle Java Runtime Environment JRE是一款为JAVA应用程序提供可靠运行环境的解决方案。 Oracle JRE7环境中的jmx.mbeanserver.JmxMBeanServer类存在沙盒绕过漏洞使得远程攻击者可以绕过java securityManager的检查远程执行任意java代码控制用户系统。 目前已知受影响环境为最新版本Oracle JRE7 update 10及其更早版本。经测试Oracle Java 6不受影响。 0 Oracle Java 7 Update ...

10CVSS1.8AI score0.97612EPSS
SaveExploits38
seebug.org
seebug.org
added 2012/06/23 12:00 a.m.80 views

Python SimpleHTTPServer 'list_directory()'函数跨站脚本漏洞

Bugtraq ID: 54083 CVE ID:CVE-2011-4940 Python SimpleHTTPServer是一款支持上传的简单HTTP服务程序。 Python SimpleHTTPServer listdirectory函数由于缺失字符集参数,攻击者可以利用漏洞进行跨站脚本攻击,可获得敏感信息或劫持用户会话。 0 Python 2.6.5 Python 2.6.2 Python 2.5.5 Python 2.5.3 Python 2.5.2 -r6 Python 2.5.2 Python 2.5.1 Python 2.5.5c2 Python 2.5 厂商补丁:...

2.6CVSS0.03213EPSS
SaveExploits1
seebug.org
seebug.org
added 2012/06/16 12:00 a.m.80 views

Ruby on Rails嵌套参数SQL注入漏洞

CVE ID: CVE-2012-2694,CVE-2012-2695 Ruby on Rails简称RoR或Rails,是一个使用Ruby语言写的开源Web应用框架,它是严格按照MVC结构开发的。 Ruby on Rails 3.2.6、3.1.6、3.0.14之前版本在SQL查询中使用了没有正确验证的输入,这些输入是通过嵌套查询参数传递到Active Record接口的,通过注入SQL代码操作SQL查询。在使用ActionPack时参数解析Rack的方式中也存在漏洞,可允许插入"IS NULL"到SQL查询。 0 Ruby on Rails 3.2.x Ruby on Rails...

7.5CVSS0.03931EPSS
SaveExploits3
seebug.org
seebug.org
added 2012/01/30 12:00 a.m.80 views

PHP ‘tidy_diagnose’函数拒绝服务漏洞

CVE-2012-0781 PHP是一款免费开放源代码的WEB脚本语言包,可使用在Microsoft Windows、Linux和Unix操作系统下。 PHP 5.3.8版本中的tidydiagnose函数中存在漏洞。远程攻击者可利用该漏洞借助对应用程序的特制输入,造成拒绝服务(空指针解引用进而应用程序崩溃),该应用程序试图在无效对象上执行Tidy::diagnose操作。 0 php:5.3.8 目前厂商还没有提供此漏洞的相关补丁或者升级程序,建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://us.php.net/sites.php -----BEGIN PGP...

5CVSS0.1AI score0.11772EPSS
SaveExploits11
seebug.org
seebug.org
added 2011/12/30 12:00 a.m.80 views

Microsoft .NET Framework表单验证URL存在欺骗漏洞

BUGTRAQ ID: 51202 CVE ID: CVE-2011-3415 ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET Framework在表单验证过程中验证返回的URL时存在欺骗漏洞,成功利用此漏洞的攻击者可将用户重定向到恶意站点,然后执行钓鱼攻击,获取用户敏感信息。此漏洞不允许攻击者直接执行代码或提升其用户权限。 0 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x Microsoft .NET Framework 2.x Microsoft...

6.8CVSS6.4AI score0.22954EPSS
SaveExploits1
seebug.org
seebug.org
added 2011/10/27 12:00 a.m.80 views

IBM WebSphere ILOG Rule Team Server未明跨站脚本漏洞

Bugtraq ID: 50368 IBM WebSphere ILOG是一款业务规则管理系统。IBM WebSphere ILOG Rule Team Server是一个基于Web的规则管理和授权环境,它允许业务用户查看、创建和修改规则。 IBM WebSphere ILOG Rule Team Server content/error.jsp存在一个未明跨站脚本漏洞,允许攻击者构建恶意链接,诱使用户解析,可获得敏感信息或劫持用户会话。 IBM WebSphere ILOG Rule Team Server 7.1.1 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息:...

6.9AI score
SaveExploits0
seebug.org
seebug.org
added 2009/12/10 12:00 a.m.80 views

Easy RM to MP3 Converter 2.7.3.700

No description provided by source. import sys print "\n============================" print " Easy RM to MP3 Converter 2.7.3.700 .m3u File Buffer Overflow Exploit " print " Tested on Windows XP SP3 " print "============================\n" calc.exe - 85 bytes shellcode...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2009/11/23 12:00 a.m.80 views

VMWare Virtual 8086 Linux Local Ring0 Exploit

No description provided by source. EDB-ID: 10207 CVE-ID: CVE-2009-2267 Title: VMWare Virtual 8086 Linux Local Ring0 Exploit Author: Tavis Ormandy and Julien Tinnes Published: 2009-10-27 Download N/A Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM...

6.9CVSS6.7AI score0.01755EPSS
SaveExploits5
seebug.org
seebug.org
added 2009/11/10 12:00 a.m.80 views

ToutVirtual VirtualIQ Multiple Vulnerabilities

No description provided by source. Secure Network - Security Research Advisory Vuln name: ToutVirtual VirtualIQ Pro Multiple Vulnerabilities Systems affected: ToutVirtual VirtualIQ Professional 3.2 build 7882 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL:...

5CVSS7.6AI score0.99708EPSS
SaveExploits25
seebug.org
seebug.org
added 2009/09/11 12:00 a.m.80 views

Microsoft Windows TCP/IP在处理特制报文中远程拒绝服务漏洞(MS09-048)

BUGTRAQ ID: 36269 CVECAN ID: CVE-2009-1926 Microsoft Windows是微软发布的非常流行的操作系统。 由于处理TCP接收窗口大小很小或为0的特制报文中的错误,导致Microsoft Windows的TCP/IP处理中存在拒绝服务漏洞。如果应用关闭了仍要发送数据的TCP连接且攻击者设置了很小的或为0的TCP接收窗口大小,受影响的服务器就无法彻底关闭TCP连接。攻击者可以通过向系统发送大量特制报文来利用这个漏洞,导致受影响的系统停止响应新的请求。即使在攻击者停止发送恶意报文之后系统仍保持无响应。 Microsoft Windows Vist...

7.8CVSS6.9AI score0.35042EPSS
SaveExploits1
Total number of security vulnerabilities5000