Ubiquiti UniFi Video version 3.7.3 (Windows) suffers from a local privilege escalation vulnerability due to insecure directory permissions.
a82e1d218ea5e2d055d53ff0277ba737Check_mk versions 1.2.8p25 and below suffer from a save_users() race condition that leads to sensitive information disclosure.
20c85c9a771f1de93e046c52df63537cAlienVault USM version 5.4.2 suffers from a cross site request forgery vulnerability.
6e771ba0baa2d865a2bac29ab5c0ceb6Mattermost versions 3.5.0 and 3.5.1 suffer from a cross site scripting vulnerability.
b386c063a6b1b10c1dad2ed59478e51aAtlassian Confluence AppFusions Doxygen versions 1.3.0, 1.3.1, 1.3.2, and 1.3.3 suffer from a cross site scripting vulnerability.
40298284e37d5c11bfd9c7e6a26fe36fAtlassian Confluence AppFusions Doxygen versions 1.3.0, 1.3.1, 1.3.2, and 1.3.3 suffer from an information disclosure vulnerability.
bc1d0ec9781d4efabfe8c2e3134f68fbAtlassian Confluence AppFusions Doxygen version 1.3.0 suffers from a path traversal vulnerability.
4e2b79e03f74cde41848df22952ee7ceXenForo ToggleME version 3.1.2 suffers from multiple cross site scripting vulnerabilities.
66b9ae98b3625528c90cfaf047dd623eAlienVault USM/OSSIM version 5.2 suffers from a cross site scripting vulnerability.
607c890e637df1fffca03228952de5feApache Archiva version 1.3.9 suffers from a cross site scripting vulnerability.
49af5bfe6cafae1122d621ea5294c340Apache Archiva version 1.3.9 suffers from a cross site request forgery vulnerability.
bb5f2cae376e13ae271a747583391445XenAPI for XenForo version 1.4.1 suffers from a remote SQL injection vulnerability.
ec6653535f15715683fb23b54a289bdbPostfix Admin version 2.93 suffers from a cross site request forgery vulnerability.
0aa6277ff6f2f8a1e8b41cee4ae3b9a2Swagger Editor version 2.9.9 suffers from a cross site scripting vulnerability.
b53df8f45f91a77bb2ce060de0233f8dUbiquiti Networks UniFi version 3.2.10 suffers from a cross site request forgery vulnerability.
feacedbdd6e190261848193e551b9695Typo3 CMS versions 6.2.14 and below and 4.5.40 and below suffer from a cross site scripting vulnerability.
2fffb26b43aca09bd54b6d7fe280d8dbMultiple buffer overflow vulnerabilities have been identified in Yahoo! Messenger versions 11.5.0.228 and below.
464fdcbb475517adc40408ae287a00e7This Metasploit module exploits a stack-based buffer overflow vulnerability in GetGo Download Manager version 4.9.0.1982 and earlier, caused by an overly long HTTP response header. By persuading the victim to download a file from a malicious server, a remote attacker could execute arbitrary code on the system or cause the application to crash. This Metasploit module has been tested successfully on Windows XP SP3.
5ec2694f22215c1438a6fe4d47c79bf2Easy File Management Web Server versions 4.0 and 5.3 contain a stack buffer overflow condition that is triggered as user-supplied input is not properly validated when handling the UserID cookie. This may allow a remote attacker to execute arbitrary code.
3df650464988576d8c2dd639a9e70a93Easy File Management Web Server version 5.3 USERID remote buffer overflow exploit.
812e9b899b8fff4928463ec1818eab7cFree Download Manager versions 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and possibly others are affected by a stack-based buffer overflow vulnerability. Proof of concept code included.
320bc871522b546403d5b3540eed9cd9GetGo Download Manager version 4.9.0.1982 HTTP response header buffer overflow remote code execution exploit.
0f6280b91d2c35008ed895688fa3ae33GetGo Download Manager versions 4.9.0.1982, 4.8.2.1346, and 4.4.5.502 suffer from a stack based buffer overflow.
8150015b9359290479bf7d4c3234749aVideoCharge Studio version 2.12.3.685 GetHttpResponse() man in the in middle remote code execution exploit.
76b00ad535403fa656497b3785380247VideoCharge Studio version 2.12.3.685 suffers from a stack buffer overflow vulnerability.
34070cc72a43434bfeb8b453e488e6c7
© 2019 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed