CuteFTP Mac version 3.1 denial of service proof of concept exploit.
f3f40dad0d7e66644372dd7e345a952cxorg-x11-server versions prior to 1.20.1 local privilege escalation exploit.
ce4740c7124e0487c7d13eb8e1491e28Tina4 Stack version 1.0.3 suffers from a cross site request forgery vulnerability.
474b889f3294d6135cae90781755b977Tina4 Stack version 1.0.3 suffers from a remote SQL injection vulnerability.
ddc080dfaca6281eb694835a41776d8fData Center Audit version 2.6.2 suffers from a cross site request forgery vulnerability.
faded8e0b62699eaed16a6dd13fa1ab7Musicco version 2.0.0 suffers from an arbitrary directory download vulnerability.
e56f47f463a07a13651b8074482cce73Alienor Web Libre version 2.0 suffers from a remote SQL injection vulnerability.
693dcc4d311b5270b6a8004e70f1fa86Surreal ToDo version 0.6.1.2 suffers from a local file inclusion vulnerability.
4544bbb63c826c4b3fdfc2422dc06211Surreal ToDo version 0.6.1.2 suffers from a remote SQL injection vulnerability.
265992952bc4e252b41f04b8a6586d2158 bytes small Linux/x86 bind (99999/TCP) netcat traditional (/bin/nc) shell (/bin/bash) shellcode.
f4b8522201682477a5e1e7f645023f22XAMPP Control Panel version 3.2.2 SEH unicode buffer overflow exploit.
fc81a31ec51873be9f0185f023efc416Cisco Prime Infrastructure (CPI) contains two basic flaws that when exploited allow an unauthenticated attacker to achieve remote code execution. The first flaw is a file upload vulnerability that allows the attacker to upload and execute files as the Apache Tomcat user; the second is a privilege escalation to root by bypassing execution restrictions in a SUID binary. This Metasploit module exploits these vulnerabilities to achieve unauthenticated remote code execution as root on the CPI default installation. This Metasploit module has been tested with CPI 3.2.0.0.258 and 3.4.0.0.348. Earlier and later versions might also be affected, although 3.4.0.0.348 is the latest at the time of writing. The file upload vulnerability should have been fixed in versions 3.4.1 and 3.3.1 Update 02.
2c9170145359581c4c8d1c13f564bce3Ubuntu Security Notice 3816-1 - Jann Horn discovered that unit_deserialize incorrectly handled status messages above a certain length. A local attacker could potentially exploit this via NotifyAccess to inject arbitrary state across re-execution and obtain root privileges. Jann Horn discovered a race condition in chown_one. A local attacker could potentially exploit this by setting arbitrary permissions on certain files to obtain root privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. Various other issues were also addressed.
0d1d149d094bc787a61b8d9a8420e7bbAndroid OS suffers from a sensitive data exposure vulnerability in its RSSI broadcasts.
a26217d9d0c12d9ab358f22208fabe78Android OS version 5.0 suffers from a sensitive data exposure vulnerability in its battery information broadcasts.
1662a0811657c2af60dfcefe19ec6d2fTufinOS version 2.1.7 build 1193 suffers from an XML external entity injection vulnerability.
ccd2c04ce995ab3a02c0fb45eeb538aaThe Don version 1.0.1 suffers from a remote SQL injection vulnerability.
a6151d20387a2fb7f431a9064d670d29Mongoose Web Server version 6.9 suffers from a denial of service vulnerability.
0bfc59fbbe8fc8dce5ff5ee4bf59679bNominas version 0.27 suffers from a remote SQL injection vulnerability.
035d880db5eccd94dd115104f910b017ServerZilla version 1.0 suffers from a remote SQL injection vulnerability.
7b2b67def4a643fdfd3f2c493c0fa519GPS Tracking System version 2.12 suffers from a remote SQL injection vulnerability.
b3d47b43dcee7925d466c114f0441523Easyndexer version 1.0 suffers from a cross site request forgery vulnerability.
5cddd718e27c0e3419a973f5446a7e5dFacturation System version 1.0 suffers from a remote SQL injection vulnerability.
cc739da9b1dce4e69acec65524f7f8edParoiciel version 11.20 suffers from a remote SQL injection vulnerability.
2cef56992e3bde78149d1a2a712ab38bData Center Audit version 2.6.2 suffers from a remote SQL injection vulnerability.
50743004a9d872e2e1324206cc8fb52a
© 2018 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed